create-nextblock 0.13.10 → 0.13.12

package/templates/nextblock-template/lib/privacy/types.ts

@@ -1,69 +1,69 @@
-// Pure, client-safe privacy/security types and constants.
-// Importable from both client and server modules (no server-only dependencies).
-
-/** Cookie that stores the visitor's consent decision. Readable client-side so the
- *  analytics guard can gate third-party scripts before any network request. */
-export const CONSENT_COOKIE_NAME = 'nb_consent_preference';
-
-/** How long a stored consent decision is honoured before we re-ask (seconds). */
-export const CONSENT_COOKIE_MAX_AGE = 365 * 24 * 60 * 60;
-
-export interface ConsentCategories {
-  /** Strictly necessary cookies are always on and cannot be declined. */
-  necessary: true;
-  analytics: boolean;
-  marketing: boolean;
-}
-
-export interface ConsentPreference extends ConsentCategories {
-  /** Opaque token also written to privacy_consent_logs for auditability. */
-  token: string;
-  /** Epoch milliseconds the decision was recorded. */
-  ts: number;
-}
-
-export interface CorporateIdentity {
-  legal_name: string;
-  address: string;
-  support_email: string;
-}
-
-export interface PrivacySettings {
-  /** Master switch for the Law 25 consent banner. */
-  banner_enabled: boolean;
-  /** Google Tag Manager container id (GTM-XXXX). Loaded only after consent. */
-  gtm_id: string;
-  /** Optional GA4 measurement id, surfaced for reference / future use. */
-  ga_measurement_id: string;
-  /** Arbitrary extra <script> markup, injected only after analytics consent. */
-  custom_scripts: string;
-  corporate: CorporateIdentity;
-}
-
-export interface SecuritySettings {
-  /** Default lifetime of a "remember this device" trust, in days. */
-  trusted_device_days: number;
-  /** When true, staff (ADMIN/WRITER) are expected to configure 2FA. Advisory. */
-  enforce_staff_2fa: boolean;
-}
-
-export const DEFAULT_PRIVACY_SETTINGS: PrivacySettings = {
-  banner_enabled: true,
-  gtm_id: '',
-  ga_measurement_id: '',
-  custom_scripts: '',
-  corporate: { legal_name: '', address: '', support_email: '' },
-};
-
-export const MIN_TRUSTED_DEVICE_DAYS = 1;
-export const MAX_TRUSTED_DEVICE_DAYS = 3650; // 10 years
-export const DEFAULT_TRUSTED_DEVICE_DAYS = 30;
-
-export const DEFAULT_SECURITY_SETTINGS: SecuritySettings = {
-  trusted_device_days: DEFAULT_TRUSTED_DEVICE_DAYS,
-  // On by default: staff are encouraged to enable 2FA (a CMS reminder banner is shown to
-  // ADMIN/WRITER accounts without a second factor). Never enforced in the sandbox.
-  enforce_staff_2fa: true,
-};
-
-export type MfaType = 'totp' | 'email';
+// Pure, client-safe privacy/security types and constants.
+// Importable from both client and server modules (no server-only dependencies).
+
+/** Cookie that stores the visitor's consent decision. Readable client-side so the
+ *  analytics guard can gate third-party scripts before any network request. */
+export const CONSENT_COOKIE_NAME = 'nb_consent_preference';
+
+/** How long a stored consent decision is honoured before we re-ask (seconds). */
+export const CONSENT_COOKIE_MAX_AGE = 365 * 24 * 60 * 60;
+
+export interface ConsentCategories {
+  /** Strictly necessary cookies are always on and cannot be declined. */
+  necessary: true;
+  analytics: boolean;
+  marketing: boolean;
+}
+
+export interface ConsentPreference extends ConsentCategories {
+  /** Opaque token also written to privacy_consent_logs for auditability. */
+  token: string;
+  /** Epoch milliseconds the decision was recorded. */
+  ts: number;
+}
+
+export interface CorporateIdentity {
+  legal_name: string;
+  address: string;
+  support_email: string;
+}
+
+export interface PrivacySettings {
+  /** Master switch for the Law 25 consent banner. */
+  banner_enabled: boolean;
+  /** Google Tag Manager container id (GTM-XXXX). Loaded only after consent. */
+  gtm_id: string;
+  /** Optional GA4 measurement id, surfaced for reference / future use. */
+  ga_measurement_id: string;
+  /** Arbitrary extra <script> markup, injected only after analytics consent. */
+  custom_scripts: string;
+  corporate: CorporateIdentity;
+}
+
+export interface SecuritySettings {
+  /** Default lifetime of a "remember this device" trust, in days. */
+  trusted_device_days: number;
+  /** When true, staff (ADMIN/WRITER) are expected to configure 2FA. Advisory. */
+  enforce_staff_2fa: boolean;
+}
+
+export const DEFAULT_PRIVACY_SETTINGS: PrivacySettings = {
+  banner_enabled: true,
+  gtm_id: '',
+  ga_measurement_id: '',
+  custom_scripts: '',
+  corporate: { legal_name: '', address: '', support_email: '' },
+};
+
+export const MIN_TRUSTED_DEVICE_DAYS = 1;
+export const MAX_TRUSTED_DEVICE_DAYS = 3650; // 10 years
+export const DEFAULT_TRUSTED_DEVICE_DAYS = 30;
+
+export const DEFAULT_SECURITY_SETTINGS: SecuritySettings = {
+  trusted_device_days: DEFAULT_TRUSTED_DEVICE_DAYS,
+  // On by default: staff are encouraged to enable 2FA (a CMS reminder banner is shown to
+  // ADMIN/WRITER accounts without a second factor). Never enforced in the sandbox.
+  enforce_staff_2fa: true,
+};
+
+export type MfaType = 'totp' | 'email';

package/templates/nextblock-template/lib/promotions/server.test.ts

@@ -1,74 +1,74 @@
-import { describe, expect, it, vi } from "vitest";
-
-vi.mock("server-only", () => ({}));
-vi.mock("@nextblock-cms/db/server", () => ({
-  getServiceRoleSupabaseClient: () => ({}),
-}));
-vi.mock("@nextblock-cms/ecommerce/server", () => ({
-  syncProductSaleCouponToFreemius: vi.fn(),
-}));
-
-import { normalizeDateInput, parsePriceCell } from "./server";
-
-describe("normalizeDateInput", () => {
-  it("treats an empty value as a valid no-op", () => {
-    expect(normalizeDateInput("", "start")).toEqual({ value: null, valid: true });
-    expect(normalizeDateInput(undefined, "end")).toEqual({ value: null, valid: true });
-  });
-
-  it("makes a date-only start the start of the day and a date-only end the end of the day", () => {
-    const start = normalizeDateInput("2026-06-10", "start");
-    expect(start.valid).toBe(true);
-    const startDate = new Date(start.value as string);
-    expect([startDate.getHours(), startDate.getMinutes(), startDate.getSeconds()]).toEqual([0, 0, 0]);
-
-    const end = normalizeDateInput("2026-06-10", "end");
-    expect(end.valid).toBe(true);
-    const endDate = new Date(end.value as string);
-    expect([endDate.getHours(), endDate.getMinutes(), endDate.getSeconds()]).toEqual([23, 59, 59]);
-  });
-
-  it("forces end seconds to 59 and start seconds to 0 for timed values", () => {
-    const end = new Date(normalizeDateInput("2026-06-10T14:30", "end").value as string);
-    expect(end.getSeconds()).toBe(59);
-    expect(end.getMinutes()).toBe(30);
-
-    const start = new Date(normalizeDateInput("2026-06-10T14:30", "start").value as string);
-    expect(start.getSeconds()).toBe(0);
-    expect(start.getMinutes()).toBe(30);
-  });
-
-  it("rejects unparseable values", () => {
-    expect(normalizeDateInput("not-a-date", "start")).toEqual({ value: null, valid: false });
-  });
-});
-
-describe("parsePriceCell", () => {
-  it("returns nulls for an empty cell", () => {
-    expect(parsePriceCell("")).toEqual({ scalar: null, map: null, error: null });
-  });
-
-  it("parses a single number", () => {
-    expect(parsePriceCell("14.99")).toEqual({ scalar: 14.99, map: null, error: null });
-  });
-
-  it("parses a multi-currency JSON map and upper-cases codes", () => {
-    const result = parsePriceCell('{"usd":14.99,"EUR":13.5}');
-    expect(result.error).toBeNull();
-    expect(result.scalar).toBeNull();
-    expect(result.map).toEqual({ USD: 14.99, EUR: 13.5 });
-  });
-
-  it("keeps null entries in a JSON map (clearing a currency)", () => {
-    const result = parsePriceCell('{"USD":null}');
-    expect(result.error).toBeNull();
-    expect(result.map).toEqual({ USD: null });
-  });
-
-  it("rejects negative or non-numeric input", () => {
-    expect(parsePriceCell("-5").error).toBeTruthy();
-    expect(parsePriceCell("abc").error).toBeTruthy();
-    expect(parsePriceCell('{"USD":-1}').error).toBeTruthy();
-    expect(parsePriceCell("[1,2]").error).toBeTruthy();
-  });
-});
+import { describe, expect, it, vi } from "vitest";
+
+vi.mock("server-only", () => ({}));
+vi.mock("@nextblock-cms/db/server", () => ({
+  getServiceRoleSupabaseClient: () => ({}),
+}));
+vi.mock("@nextblock-cms/ecommerce/server", () => ({
+  syncProductSaleCouponToFreemius: vi.fn(),
+}));
+
+import { normalizeDateInput, parsePriceCell } from "./server";
+
+describe("normalizeDateInput", () => {
+  it("treats an empty value as a valid no-op", () => {
+    expect(normalizeDateInput("", "start")).toEqual({ value: null, valid: true });
+    expect(normalizeDateInput(undefined, "end")).toEqual({ value: null, valid: true });
+  });
+
+  it("makes a date-only start the start of the day and a date-only end the end of the day", () => {
+    const start = normalizeDateInput("2026-06-10", "start");
+    expect(start.valid).toBe(true);
+    const startDate = new Date(start.value as string);
+    expect([startDate.getHours(), startDate.getMinutes(), startDate.getSeconds()]).toEqual([0, 0, 0]);
+
+    const end = normalizeDateInput("2026-06-10", "end");
+    expect(end.valid).toBe(true);
+    const endDate = new Date(end.value as string);
+    expect([endDate.getHours(), endDate.getMinutes(), endDate.getSeconds()]).toEqual([23, 59, 59]);
+  });
+
+  it("forces end seconds to 59 and start seconds to 0 for timed values", () => {
+    const end = new Date(normalizeDateInput("2026-06-10T14:30", "end").value as string);
+    expect(end.getSeconds()).toBe(59);
+    expect(end.getMinutes()).toBe(30);
+
+    const start = new Date(normalizeDateInput("2026-06-10T14:30", "start").value as string);
+    expect(start.getSeconds()).toBe(0);
+    expect(start.getMinutes()).toBe(30);
+  });
+
+  it("rejects unparseable values", () => {
+    expect(normalizeDateInput("not-a-date", "start")).toEqual({ value: null, valid: false });
+  });
+});
+
+describe("parsePriceCell", () => {
+  it("returns nulls for an empty cell", () => {
+    expect(parsePriceCell("")).toEqual({ scalar: null, map: null, error: null });
+  });
+
+  it("parses a single number", () => {
+    expect(parsePriceCell("14.99")).toEqual({ scalar: 14.99, map: null, error: null });
+  });
+
+  it("parses a multi-currency JSON map and upper-cases codes", () => {
+    const result = parsePriceCell('{"usd":14.99,"EUR":13.5}');
+    expect(result.error).toBeNull();
+    expect(result.scalar).toBeNull();
+    expect(result.map).toEqual({ USD: 14.99, EUR: 13.5 });
+  });
+
+  it("keeps null entries in a JSON map (clearing a currency)", () => {
+    const result = parsePriceCell('{"USD":null}');
+    expect(result.error).toBeNull();
+    expect(result.map).toEqual({ USD: null });
+  });
+
+  it("rejects negative or non-numeric input", () => {
+    expect(parsePriceCell("-5").error).toBeTruthy();
+    expect(parsePriceCell("abc").error).toBeTruthy();
+    expect(parsePriceCell('{"USD":-1}').error).toBeTruthy();
+    expect(parsePriceCell("[1,2]").error).toBeTruthy();
+  });
+});