create-nextblock 0.14.0 → 0.14.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (242) hide show
  1. package/docker-template/.dockerignore +23 -23
  2. package/docker-template/.env.docker.example +69 -69
  3. package/docker-template/docker/db/init/99-jwt.sql +6 -6
  4. package/docker-template/docker/db/init/99-roles.sql +25 -25
  5. package/docker-template/docker/kong/kong.yml +112 -112
  6. package/docker-template/scripts/docker-setup.mjs +310 -310
  7. package/libs/db/tsconfig.lib.json +3 -3
  8. package/libs/editor/tsconfig.lib.json +3 -3
  9. package/libs/ui/tsconfig.lib.json +3 -3
  10. package/libs/utils/tsconfig.json +3 -3
  11. package/package.json +1 -1
  12. package/project.json +19 -19
  13. package/templates/nextblock-template/.browserslistrc +11 -11
  14. package/templates/nextblock-template/.dockerignore +23 -23
  15. package/templates/nextblock-template/README.md +34 -34
  16. package/templates/nextblock-template/app/(auth-pages)/layout.tsx +9 -9
  17. package/templates/nextblock-template/app/(auth-pages)/post-sign-in/page.tsx +27 -27
  18. package/templates/nextblock-template/app/(auth-pages)/sign-up/page.tsx +46 -46
  19. package/templates/nextblock-template/app/(auth-pages)/two-factor/page.tsx +51 -51
  20. package/templates/nextblock-template/app/ToasterProvider.tsx +17 -17
  21. package/templates/nextblock-template/app/[slug]/pageClientActions.ts +7 -7
  22. package/templates/nextblock-template/app/actions/consent.ts +57 -57
  23. package/templates/nextblock-template/app/actions/postActions.ts +146 -146
  24. package/templates/nextblock-template/app/actions/twoFactorEmail.ts +22 -22
  25. package/templates/nextblock-template/app/api/ai/cortex/build-widget/route.ts +153 -153
  26. package/templates/nextblock-template/app/api/ai/generate-blocks/route.ts +96 -96
  27. package/templates/nextblock-template/app/api/brand/email-logo/route.ts +48 -48
  28. package/templates/nextblock-template/app/api/cms/check-updates/route.ts +44 -44
  29. package/templates/nextblock-template/app/api/cms/full-backup/export/route.ts +33 -33
  30. package/templates/nextblock-template/app/api/cms/full-backup/restore/route.ts +63 -63
  31. package/templates/nextblock-template/app/api/cron/reset-sandbox/route.ts +3490 -3490
  32. package/templates/nextblock-template/app/api/cron/reset-sandbox/sandboxResetSql.ts +5749 -5749
  33. package/templates/nextblock-template/app/api/cron/sync-currencies/route.ts +39 -39
  34. package/templates/nextblock-template/app/api/custom-blocks/db-relations/route.ts +92 -92
  35. package/templates/nextblock-template/app/api/custom-blocks/editor-definitions/route.ts +43 -43
  36. package/templates/nextblock-template/app/api/media/library/route.ts +69 -69
  37. package/templates/nextblock-template/app/api/media/r2-presigned/route.ts +53 -53
  38. package/templates/nextblock-template/app/api/media/record/route.ts +160 -160
  39. package/templates/nextblock-template/app/api/search/route.ts +43 -43
  40. package/templates/nextblock-template/app/article/[slug]/PostClientContent.tsx +441 -441
  41. package/templates/nextblock-template/app/auth/callback/route.ts +31 -31
  42. package/templates/nextblock-template/app/cart/page.tsx +7 -7
  43. package/templates/nextblock-template/app/cms/blocks/components/CustomBlockEditorPreview.tsx +160 -160
  44. package/templates/nextblock-template/app/cms/blocks/components/MediaLibraryModal.tsx +149 -149
  45. package/templates/nextblock-template/app/cms/blocks/editors/DynamicCustomBlockEditor.tsx +167 -167
  46. package/templates/nextblock-template/app/cms/blocks/editors/ImageBlockEditor.tsx +4 -2
  47. package/templates/nextblock-template/app/cms/blocks/editors/TextBlockEditor.tsx +90 -90
  48. package/templates/nextblock-template/app/cms/components/ConnectGitHubButton.tsx +122 -122
  49. package/templates/nextblock-template/app/cms/components/CortexAiPageContext.tsx +58 -58
  50. package/templates/nextblock-template/app/cms/components/FeedbackModal.tsx +36 -36
  51. package/templates/nextblock-template/app/cms/components/SystemAlertsBanner.tsx +112 -112
  52. package/templates/nextblock-template/app/cms/components/TwoFactorReminderBanner.tsx +45 -45
  53. package/templates/nextblock-template/app/cms/components/github-connect-actions.ts +102 -102
  54. package/templates/nextblock-template/app/cms/components/system-alerts-actions.ts +31 -31
  55. package/templates/nextblock-template/app/cms/custom-blocks/[id]/edit/page.tsx +66 -66
  56. package/templates/nextblock-template/app/cms/custom-blocks/actions.ts +519 -519
  57. package/templates/nextblock-template/app/cms/custom-blocks/components/BlocksLibraryTransferControls.tsx +256 -256
  58. package/templates/nextblock-template/app/cms/custom-blocks/components/DBRelationSelect.tsx +384 -384
  59. package/templates/nextblock-template/app/cms/custom-blocks/components/ImageR2Picker.tsx +221 -221
  60. package/templates/nextblock-template/app/cms/custom-blocks/new/page.tsx +12 -12
  61. package/templates/nextblock-template/app/cms/custom-blocks/page.tsx +438 -438
  62. package/templates/nextblock-template/app/cms/dashboard/actions.ts +228 -228
  63. package/templates/nextblock-template/app/cms/dashboard/components/DashboardOnboarding.tsx +130 -130
  64. package/templates/nextblock-template/app/cms/import-export/actions.ts +226 -226
  65. package/templates/nextblock-template/app/cms/layout.tsx +73 -73
  66. package/templates/nextblock-template/app/cms/media/components/FolderNavigator.tsx +273 -273
  67. package/templates/nextblock-template/app/cms/media/components/FolderTree.tsx +122 -122
  68. package/templates/nextblock-template/app/cms/media/components/MediaEditForm.tsx +26 -26
  69. package/templates/nextblock-template/app/cms/media/components/MediaGridClient.tsx +69 -69
  70. package/templates/nextblock-template/app/cms/navigation/components/NavigationMenuDnd.tsx +3 -3
  71. package/templates/nextblock-template/app/cms/products/attributes/page.tsx +12 -12
  72. package/templates/nextblock-template/app/cms/products/categories/page.tsx +12 -12
  73. package/templates/nextblock-template/app/cms/products/inventory/page.tsx +13 -13
  74. package/templates/nextblock-template/app/cms/products/new/page.tsx +135 -135
  75. package/templates/nextblock-template/app/cms/products/productFormData.ts +133 -133
  76. package/templates/nextblock-template/app/cms/products/settings/page.tsx +5 -5
  77. package/templates/nextblock-template/app/cms/promotions/PromotionsWorkspace.tsx +456 -456
  78. package/templates/nextblock-template/app/cms/promotions/actions.ts +115 -115
  79. package/templates/nextblock-template/app/cms/promotions/page.tsx +31 -31
  80. package/templates/nextblock-template/app/cms/revisions/service.ts +19 -19
  81. package/templates/nextblock-template/app/cms/revisions/utils.ts +132 -132
  82. package/templates/nextblock-template/app/cms/settings/backup-restore/BackupRestoreWorkspace.tsx +1004 -1004
  83. package/templates/nextblock-template/app/cms/settings/backup-restore/page.tsx +29 -29
  84. package/templates/nextblock-template/app/cms/settings/bot-protection/page.tsx +24 -24
  85. package/templates/nextblock-template/app/cms/settings/cortex-ai/SandboxCortexAiSettingsClient.tsx +688 -688
  86. package/templates/nextblock-template/app/cms/settings/currencies/actions.ts +331 -331
  87. package/templates/nextblock-template/app/cms/settings/currencies/page.tsx +494 -494
  88. package/templates/nextblock-template/app/cms/settings/email/page.tsx +28 -28
  89. package/templates/nextblock-template/app/cms/settings/extra-translations/ExtraTranslationsWorkspace.tsx +767 -767
  90. package/templates/nextblock-template/app/cms/settings/extra-translations/page.tsx +93 -93
  91. package/templates/nextblock-template/app/cms/settings/google-analytics/page.tsx +26 -26
  92. package/templates/nextblock-template/app/cms/settings/logos/[id]/edit/page.tsx +7 -7
  93. package/templates/nextblock-template/app/cms/settings/logos/components/BrandingSettingsForm.tsx +339 -339
  94. package/templates/nextblock-template/app/cms/settings/logos/components/DeleteLogoButton.tsx +21 -21
  95. package/templates/nextblock-template/app/cms/settings/logos/components/LogoForm.tsx +23 -21
  96. package/templates/nextblock-template/app/cms/settings/logos/components/SetActiveLogoButton.tsx +42 -42
  97. package/templates/nextblock-template/app/cms/settings/logos/components/SiteSeoSettingsForm.tsx +133 -133
  98. package/templates/nextblock-template/app/cms/settings/logos/new/page.tsx +8 -8
  99. package/templates/nextblock-template/app/cms/settings/packages/package-card.tsx +122 -122
  100. package/templates/nextblock-template/app/cms/settings/privacy/page.tsx +27 -27
  101. package/templates/nextblock-template/app/cms/settings/registration/page.tsx +27 -27
  102. package/templates/nextblock-template/app/cms/settings/security/components/SecurityPanel.tsx +9 -7
  103. package/templates/nextblock-template/app/cms/settings/security/page.tsx +33 -33
  104. package/templates/nextblock-template/app/cms/settings/taxes/page.tsx +21 -21
  105. package/templates/nextblock-template/app/cms/shipping/page.tsx +20 -20
  106. package/templates/nextblock-template/app/cms/users/components/DeleteUserButton.tsx +12 -12
  107. package/templates/nextblock-template/app/lib/site-settings.ts +105 -105
  108. package/templates/nextblock-template/app/profile/ProfilePageHeader.tsx +16 -16
  109. package/templates/nextblock-template/app/profile/ProfilePageMissingState.tsx +9 -9
  110. package/templates/nextblock-template/app/profile/account-links.ts +22 -22
  111. package/templates/nextblock-template/app/profile/orders/CustomerOrdersPageClient.tsx +124 -124
  112. package/templates/nextblock-template/app/profile/orders/page.tsx +19 -19
  113. package/templates/nextblock-template/app/profile/password/PasswordSettingsPageClient.tsx +128 -128
  114. package/templates/nextblock-template/app/profile/password/actions.ts +59 -59
  115. package/templates/nextblock-template/app/profile/password/page.tsx +27 -27
  116. package/templates/nextblock-template/app/setup/SetupWizard.tsx +678 -678
  117. package/templates/nextblock-template/app/setup/layout.tsx +13 -13
  118. package/templates/nextblock-template/app/setup/page.tsx +111 -111
  119. package/templates/nextblock-template/app/sitemap.ts +130 -130
  120. package/templates/nextblock-template/components/CartDrawerLoader.tsx +7 -7
  121. package/templates/nextblock-template/components/DeferredCartDrawer.tsx +23 -23
  122. package/templates/nextblock-template/components/DeferredGoogleAnalytics.tsx +70 -70
  123. package/templates/nextblock-template/components/DeferredGoogleTagManager.tsx +70 -70
  124. package/templates/nextblock-template/components/DeferredSpeedInsights.tsx +69 -69
  125. package/templates/nextblock-template/components/FeatureImageHero.tsx +47 -47
  126. package/templates/nextblock-template/components/FooterNavigation.tsx +32 -32
  127. package/templates/nextblock-template/components/HtmlScriptExecutor.tsx +47 -47
  128. package/templates/nextblock-template/components/LanguageSwitcher.tsx +2 -2
  129. package/templates/nextblock-template/components/PublicEnvBootstrap.tsx +30 -30
  130. package/templates/nextblock-template/components/ResponsiveNav.tsx +14 -14
  131. package/templates/nextblock-template/components/auth/AuthBotProtection.tsx +182 -182
  132. package/templates/nextblock-template/components/blocks/PostCardSkeleton.tsx +12 -12
  133. package/templates/nextblock-template/components/blocks/PostsGridBlock.tsx +12 -12
  134. package/templates/nextblock-template/components/blocks/ecommerceRendererLoaders.ts +23 -23
  135. package/templates/nextblock-template/components/blocks/renderers/FormBlockRenderer.tsx +249 -249
  136. package/templates/nextblock-template/components/blocks/types.ts +7 -7
  137. package/templates/nextblock-template/components/env-var-warning.tsx +3 -3
  138. package/templates/nextblock-template/components/form-message.tsx +32 -32
  139. package/templates/nextblock-template/components/media/YouTubeFacade.tsx +105 -105
  140. package/templates/nextblock-template/components/media/youtube-embed-replace.tsx +32 -32
  141. package/templates/nextblock-template/components/privacy/ConsentBanner.tsx +170 -170
  142. package/templates/nextblock-template/components/privacy/ConsentGatedAnalytics.tsx +70 -70
  143. package/templates/nextblock-template/components/renderers/CachedDynamicLayoutEngine.tsx +28 -28
  144. package/templates/nextblock-template/components/renderers/DynamicLayoutEngine.test.tsx +166 -166
  145. package/templates/nextblock-template/components/renderers/DynamicLayoutEngine.tsx +471 -471
  146. package/templates/nextblock-template/components/submit-button.tsx +23 -23
  147. package/templates/nextblock-template/components/theme-switcher.tsx +8 -8
  148. package/templates/nextblock-template/components/visual-editing/DeferredVisualEditing.tsx +21 -21
  149. package/templates/nextblock-template/context/AuthContext.tsx +23 -23
  150. package/templates/nextblock-template/context/language-rest-client.ts +32 -32
  151. package/templates/nextblock-template/docker/db/init/99-jwt.sql +6 -6
  152. package/templates/nextblock-template/docker/db/init/99-roles.sql +25 -25
  153. package/templates/nextblock-template/docker/kong/kong.yml +112 -112
  154. package/templates/nextblock-template/docs/01-PROJECT-OVERVIEW.md +94 -94
  155. package/templates/nextblock-template/docs/02-ECOMMERCE-CAPABILITIES.md +364 -364
  156. package/templates/nextblock-template/docs/03-CMS-AND-EDITOR.md +202 -202
  157. package/templates/nextblock-template/docs/04-DATABASE-AND-AUTH.md +246 -246
  158. package/templates/nextblock-template/docs/06-CLI-AND-SCAFFOLDING.md +176 -176
  159. package/templates/nextblock-template/docs/07-BLOCK-SDK-AND-EXTENSIBILITY.md +146 -146
  160. package/templates/nextblock-template/docs/10-CUSTOM-BLOCKS.md +222 -222
  161. package/templates/nextblock-template/docs/11-SELF-HOSTED-DOCKER.md +173 -173
  162. package/templates/nextblock-template/docs/12-VERCEL-DEPLOYMENT.md +170 -170
  163. package/templates/nextblock-template/docs/13-STAYING-UP-TO-DATE.md +151 -151
  164. package/templates/nextblock-template/docs/README.md +39 -39
  165. package/templates/nextblock-template/hooks/use-hotkeys.ts +21 -21
  166. package/templates/nextblock-template/hooks/useGlobalSearch.ts +101 -101
  167. package/templates/nextblock-template/index.d.ts +7 -7
  168. package/templates/nextblock-template/lib/app-secrets.ts +39 -39
  169. package/templates/nextblock-template/lib/auth/cookies.ts +47 -47
  170. package/templates/nextblock-template/lib/auth/crypto.ts +45 -45
  171. package/templates/nextblock-template/lib/auth/trustedDevices.ts +92 -92
  172. package/templates/nextblock-template/lib/auth-redirects.ts +46 -46
  173. package/templates/nextblock-template/lib/blocks/README.md +13 -13
  174. package/templates/nextblock-template/lib/botProtection/verify.ts +134 -134
  175. package/templates/nextblock-template/lib/cms-transfer/server.ts +2243 -2243
  176. package/templates/nextblock-template/lib/cms-transfer/types.ts +145 -145
  177. package/templates/nextblock-template/lib/custom-block-definitions.ts +87 -87
  178. package/templates/nextblock-template/lib/custom-block-r2-upload-shared.ts +178 -178
  179. package/templates/nextblock-template/lib/custom-block-r2-upload.test.ts +140 -140
  180. package/templates/nextblock-template/lib/custom-block-r2-upload.ts +88 -88
  181. package/templates/nextblock-template/lib/custom-block-relations.test.ts +227 -227
  182. package/templates/nextblock-template/lib/custom-block-relations.ts +279 -279
  183. package/templates/nextblock-template/lib/custom-block-safelist.ts +14 -14
  184. package/templates/nextblock-template/lib/editor/dynamic-extension-core.test.ts +172 -172
  185. package/templates/nextblock-template/lib/editor/dynamic-extension-core.ts +213 -213
  186. package/templates/nextblock-template/lib/editor/dynamic-extension-loader.ts +22 -22
  187. package/templates/nextblock-template/lib/editor/dynamic-extensions.tsx +193 -193
  188. package/templates/nextblock-template/lib/email/branding-format.test.ts +133 -133
  189. package/templates/nextblock-template/lib/email/branding-format.ts +123 -123
  190. package/templates/nextblock-template/lib/email/branding.ts +76 -76
  191. package/templates/nextblock-template/lib/full-backup/manifest.test.ts +121 -121
  192. package/templates/nextblock-template/lib/full-backup/manifest.ts +206 -206
  193. package/templates/nextblock-template/lib/full-backup/server.ts +743 -743
  194. package/templates/nextblock-template/lib/logos/active-logo.ts +53 -53
  195. package/templates/nextblock-template/lib/media/resolveMediaUrl.ts +54 -54
  196. package/templates/nextblock-template/lib/media/youtube.ts +99 -99
  197. package/templates/nextblock-template/lib/onboarding/actions.ts +31 -31
  198. package/templates/nextblock-template/lib/onboarding/status.ts +222 -222
  199. package/templates/nextblock-template/lib/posts/readTime.ts +60 -60
  200. package/templates/nextblock-template/lib/privacy/consent-client.ts +57 -57
  201. package/templates/nextblock-template/lib/privacy/contact-emails.ts +64 -64
  202. package/templates/nextblock-template/lib/privacy/settings.ts +115 -115
  203. package/templates/nextblock-template/lib/privacy/types.ts +69 -69
  204. package/templates/nextblock-template/lib/promotions/server.test.ts +74 -74
  205. package/templates/nextblock-template/lib/promotions/server.ts +741 -741
  206. package/templates/nextblock-template/lib/resolve-block-relations.test.ts +142 -142
  207. package/templates/nextblock-template/lib/resolve-block-relations.ts +255 -255
  208. package/templates/nextblock-template/lib/search/types.ts +27 -27
  209. package/templates/nextblock-template/lib/setup/actions.ts +460 -460
  210. package/templates/nextblock-template/lib/setup/env-status.ts +125 -125
  211. package/templates/nextblock-template/lib/setup/env-write.ts +111 -111
  212. package/templates/nextblock-template/lib/setup/migrations-bundle.ts +87 -87
  213. package/templates/nextblock-template/lib/setup/provisioning.ts +59 -59
  214. package/templates/nextblock-template/lib/setup/schema-apply.ts +408 -408
  215. package/templates/nextblock-template/lib/setup/system-config.ts +105 -105
  216. package/templates/nextblock-template/lib/setup/types.ts +18 -18
  217. package/templates/nextblock-template/lib/site-url.ts +48 -48
  218. package/templates/nextblock-template/lib/storage/provider.ts +66 -66
  219. package/templates/nextblock-template/lib/storage/supabase-storage.ts +103 -103
  220. package/templates/nextblock-template/lib/updates/check-upstream.ts +441 -441
  221. package/templates/nextblock-template/lib/updates/github-device.ts +206 -206
  222. package/templates/nextblock-template/lib/updates/repo-identity.ts +56 -56
  223. package/templates/nextblock-template/next-env.d.ts +1 -0
  224. package/templates/nextblock-template/package.json +6 -6
  225. package/templates/nextblock-template/postcss.config.js +6 -6
  226. package/templates/nextblock-template/scripts/backup.js +115 -115
  227. package/templates/nextblock-template/scripts/docker-setup.mjs +310 -310
  228. package/templates/nextblock-template/scripts/restore.js +385 -385
  229. package/templates/nextblock-template/scripts/verify-cortex-ai-build-widget.tsx +98 -98
  230. package/templates/nextblock-template/scripts/verify-cortex-ai-generate-blocks.ts +62 -62
  231. package/templates/nextblock-template/scripts/verify-cortex-ai-global-tools.ts +537 -537
  232. package/templates/nextblock-template/scripts/verify-cortex-ai-routing.ts +58 -58
  233. package/templates/nextblock-template/scripts/verify-custom-block-definitions.ts +188 -188
  234. package/templates/nextblock-template/scripts/verify-dynamic-custom-block-extensions.ts +123 -123
  235. package/templates/nextblock-template/scripts/verify-dynamic-layout-engine.tsx +133 -133
  236. package/templates/nextblock-template/scripts/verify-milestone-2-custom-blocks.ts +65 -65
  237. package/templates/nextblock-template/tailwind.config.js +25 -25
  238. package/templates/nextblock-template/tools/build-migrate.mjs +209 -209
  239. package/templates/nextblock-template/tools/configure-supabase-auth.js +282 -282
  240. package/templates/nextblock-template/tsconfig.tsbuildinfo +1 -1
  241. package/templates/nextblock-template/types/jsdom.d.ts +6 -6
  242. package/tsconfig.base.json +3 -3
@@ -1,105 +1,105 @@
1
- 'use client';
2
-
3
- import React, { useState } from 'react';
4
- import Image from 'next/image';
5
- import {
6
- buildNoCookieEmbedUrl,
7
- youTubePosterUrl,
8
- YOUTUBE_POSTER_DIMENSIONS,
9
- type YouTubePosterQuality,
10
- } from '../../lib/media/youtube';
11
-
12
- interface YouTubeFacadeProps {
13
- videoId: string;
14
- title?: string;
15
- /** Serialized extra player params (from parseYouTubeUrl). */
16
- query?: string;
17
- /** Classes for the clickable surface / injected iframe. Defaults to filling its parent. */
18
- className?: string;
19
- /**
20
- * Above-the-fold embeds. The poster is very often the page's LCP element, so
21
- * this preloads it, marks it fetchpriority=high and drops lazy-loading.
22
- */
23
- priority?: boolean;
24
- /** Responsive-srcset layout hint; override when the embed is not ~half-width. */
25
- sizes?: string;
26
- }
27
-
28
- const FILL = 'absolute inset-0 h-full w-full';
29
- // The video block is content-width, so it is full-bleed on phones and roughly a
30
- // column wide on desktop. Callers that know better pass their own `sizes`.
31
- const DEFAULT_SIZES = '(max-width: 768px) 100vw, 50vw';
32
-
33
- /**
34
- * Click-to-play YouTube facade: renders a poster + play button and loads no
35
- * youtube.com resource at all until the user clicks. This is what keeps the
36
- * Lighthouse `inspector-issues` audit green -- the nocookie host still writes
37
- * cookies from the player JS, so the only reliable fix is not booting the
38
- * player during the audit. See lib/media/youtube.ts.
39
- */
40
- const YouTubeFacade: React.FC<YouTubeFacadeProps> = ({
41
- videoId,
42
- title,
43
- query,
44
- className,
45
- priority = false,
46
- sizes,
47
- }) => {
48
- const [activated, setActivated] = useState(false);
49
- const [posterQuality, setPosterQuality] = useState<YouTubePosterQuality>('maxres');
50
- const label = title || 'YouTube video';
51
- const surface = className || FILL;
52
- const poster = youTubePosterUrl(videoId, posterQuality);
53
- const posterSize = YOUTUBE_POSTER_DIMENSIONS[posterQuality];
54
-
55
- if (activated) {
56
- return (
57
- <iframe
58
- className={surface}
59
- src={buildNoCookieEmbedUrl(videoId, new URLSearchParams(query || ''), { autoplay: true })}
60
- title={label}
61
- allow="autoplay; accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
62
- referrerPolicy="strict-origin-when-cross-origin"
63
- allowFullScreen
64
- />
65
- );
66
- }
67
-
68
- return (
69
- <button
70
- type="button"
71
- onClick={() => setActivated(true)}
72
- aria-label={`Play video: ${label}`}
73
- className={`${surface} group flex items-center justify-center overflow-hidden border-0 bg-black p-0`}
74
- >
75
- {/* Routed through next/image on purpose: i.ytimg.com serves the poster as a
76
- full-size JPEG with a 2h cache TTL, which made a ~205 KiB download the LCP
77
- for a thumbnail-sized slot. The optimizer re-encodes to AVIF/WebP at the
78
- displayed width and serves it same-origin under the app's long cache TTL. */}
79
- <Image
80
- src={poster}
81
- alt=""
82
- aria-hidden="true"
83
- width={posterSize.width}
84
- height={posterSize.height}
85
- sizes={sizes || DEFAULT_SIZES}
86
- quality={60}
87
- priority={priority}
88
- fetchPriority={priority ? 'high' : undefined}
89
- loading={priority ? undefined : 'lazy'}
90
- decoding="async"
91
- // maxresdefault.jpg is not uploaded for every video; fall back to the
92
- // hqdefault variant, which always exists.
93
- onError={() => setPosterQuality((current) => (current === 'maxres' ? 'hq' : current))}
94
- className="absolute inset-0 h-full w-full object-cover opacity-90 transition group-hover:opacity-100"
95
- />
96
- <span className="relative flex h-16 w-16 items-center justify-center rounded-full bg-black/70 text-white shadow-lg transition group-hover:scale-110 group-hover:bg-red-600">
97
- <svg viewBox="0 0 24 24" className="ml-1 h-7 w-7" aria-hidden="true" focusable="false">
98
- <path d="M8 5v14l11-7z" fill="currentColor" />
99
- </svg>
100
- </span>
101
- </button>
102
- );
103
- };
104
-
105
- export default YouTubeFacade;
1
+ 'use client';
2
+
3
+ import React, { useState } from 'react';
4
+ import Image from 'next/image';
5
+ import {
6
+ buildNoCookieEmbedUrl,
7
+ youTubePosterUrl,
8
+ YOUTUBE_POSTER_DIMENSIONS,
9
+ type YouTubePosterQuality,
10
+ } from '../../lib/media/youtube';
11
+
12
+ interface YouTubeFacadeProps {
13
+ videoId: string;
14
+ title?: string;
15
+ /** Serialized extra player params (from parseYouTubeUrl). */
16
+ query?: string;
17
+ /** Classes for the clickable surface / injected iframe. Defaults to filling its parent. */
18
+ className?: string;
19
+ /**
20
+ * Above-the-fold embeds. The poster is very often the page's LCP element, so
21
+ * this preloads it, marks it fetchpriority=high and drops lazy-loading.
22
+ */
23
+ priority?: boolean;
24
+ /** Responsive-srcset layout hint; override when the embed is not ~half-width. */
25
+ sizes?: string;
26
+ }
27
+
28
+ const FILL = 'absolute inset-0 h-full w-full';
29
+ // The video block is content-width, so it is full-bleed on phones and roughly a
30
+ // column wide on desktop. Callers that know better pass their own `sizes`.
31
+ const DEFAULT_SIZES = '(max-width: 768px) 100vw, 50vw';
32
+
33
+ /**
34
+ * Click-to-play YouTube facade: renders a poster + play button and loads no
35
+ * youtube.com resource at all until the user clicks. This is what keeps the
36
+ * Lighthouse `inspector-issues` audit green -- the nocookie host still writes
37
+ * cookies from the player JS, so the only reliable fix is not booting the
38
+ * player during the audit. See lib/media/youtube.ts.
39
+ */
40
+ const YouTubeFacade: React.FC<YouTubeFacadeProps> = ({
41
+ videoId,
42
+ title,
43
+ query,
44
+ className,
45
+ priority = false,
46
+ sizes,
47
+ }) => {
48
+ const [activated, setActivated] = useState(false);
49
+ const [posterQuality, setPosterQuality] = useState<YouTubePosterQuality>('maxres');
50
+ const label = title || 'YouTube video';
51
+ const surface = className || FILL;
52
+ const poster = youTubePosterUrl(videoId, posterQuality);
53
+ const posterSize = YOUTUBE_POSTER_DIMENSIONS[posterQuality];
54
+
55
+ if (activated) {
56
+ return (
57
+ <iframe
58
+ className={surface}
59
+ src={buildNoCookieEmbedUrl(videoId, new URLSearchParams(query || ''), { autoplay: true })}
60
+ title={label}
61
+ allow="autoplay; accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
62
+ referrerPolicy="strict-origin-when-cross-origin"
63
+ allowFullScreen
64
+ />
65
+ );
66
+ }
67
+
68
+ return (
69
+ <button
70
+ type="button"
71
+ onClick={() => setActivated(true)}
72
+ aria-label={`Play video: ${label}`}
73
+ className={`${surface} group flex items-center justify-center overflow-hidden border-0 bg-black p-0`}
74
+ >
75
+ {/* Routed through next/image on purpose: i.ytimg.com serves the poster as a
76
+ full-size JPEG with a 2h cache TTL, which made a ~205 KiB download the LCP
77
+ for a thumbnail-sized slot. The optimizer re-encodes to AVIF/WebP at the
78
+ displayed width and serves it same-origin under the app's long cache TTL. */}
79
+ <Image
80
+ src={poster}
81
+ alt=""
82
+ aria-hidden="true"
83
+ width={posterSize.width}
84
+ height={posterSize.height}
85
+ sizes={sizes || DEFAULT_SIZES}
86
+ quality={60}
87
+ priority={priority}
88
+ fetchPriority={priority ? 'high' : undefined}
89
+ loading={priority ? undefined : 'lazy'}
90
+ decoding="async"
91
+ // maxresdefault.jpg is not uploaded for every video; fall back to the
92
+ // hqdefault variant, which always exists.
93
+ onError={() => setPosterQuality((current) => (current === 'maxres' ? 'hq' : current))}
94
+ className="absolute inset-0 h-full w-full object-cover opacity-90 transition group-hover:opacity-100"
95
+ />
96
+ <span className="relative flex h-16 w-16 items-center justify-center rounded-full bg-black/70 text-white shadow-lg transition group-hover:scale-110 group-hover:bg-red-600">
97
+ <svg viewBox="0 0 24 24" className="ml-1 h-7 w-7" aria-hidden="true" focusable="false">
98
+ <path d="M8 5v14l11-7z" fill="currentColor" />
99
+ </svg>
100
+ </span>
101
+ </button>
102
+ );
103
+ };
104
+
105
+ export default YouTubeFacade;
@@ -1,32 +1,32 @@
1
- import React from 'react';
2
- import { Element, type HTMLReactParserOptions } from 'html-react-parser';
3
- import YouTubeFacade from './YouTubeFacade';
4
- import { parseYouTubeUrl } from '../../lib/media/youtube';
5
-
6
- /**
7
- * html-react-parser `replace` helper: swaps any YouTube <iframe> for a
8
- * click-to-play facade (zero third-party requests on load) and forces
9
- * loading="lazy" on every other third-party frame.
10
- * Returns undefined to let the parser render the node normally.
11
- */
12
- export function replaceYouTubeIframe(domNode: Element): React.ReactElement | undefined {
13
- if (domNode.name !== 'iframe' || !domNode.attribs) return undefined;
14
- const parsed = parseYouTubeUrl(domNode.attribs.src);
15
- if (!parsed) {
16
- if (!domNode.attribs.loading) domNode.attribs.loading = 'lazy';
17
- return undefined;
18
- }
19
- return (
20
- <YouTubeFacade
21
- videoId={parsed.videoId}
22
- title={domNode.attribs.title}
23
- query={parsed.params.toString()}
24
- className={domNode.attribs.class}
25
- />
26
- );
27
- }
28
-
29
- /** Minimal parser options for raw-HTML surfaces that only need embed safety. */
30
- export const embedSafeParserOptions: HTMLReactParserOptions = {
31
- replace: (domNode) => (domNode instanceof Element ? replaceYouTubeIframe(domNode) : undefined),
32
- };
1
+ import React from 'react';
2
+ import { Element, type HTMLReactParserOptions } from 'html-react-parser';
3
+ import YouTubeFacade from './YouTubeFacade';
4
+ import { parseYouTubeUrl } from '../../lib/media/youtube';
5
+
6
+ /**
7
+ * html-react-parser `replace` helper: swaps any YouTube <iframe> for a
8
+ * click-to-play facade (zero third-party requests on load) and forces
9
+ * loading="lazy" on every other third-party frame.
10
+ * Returns undefined to let the parser render the node normally.
11
+ */
12
+ export function replaceYouTubeIframe(domNode: Element): React.ReactElement | undefined {
13
+ if (domNode.name !== 'iframe' || !domNode.attribs) return undefined;
14
+ const parsed = parseYouTubeUrl(domNode.attribs.src);
15
+ if (!parsed) {
16
+ if (!domNode.attribs.loading) domNode.attribs.loading = 'lazy';
17
+ return undefined;
18
+ }
19
+ return (
20
+ <YouTubeFacade
21
+ videoId={parsed.videoId}
22
+ title={domNode.attribs.title}
23
+ query={parsed.params.toString()}
24
+ className={domNode.attribs.class}
25
+ />
26
+ );
27
+ }
28
+
29
+ /** Minimal parser options for raw-HTML surfaces that only need embed safety. */
30
+ export const embedSafeParserOptions: HTMLReactParserOptions = {
31
+ replace: (domNode) => (domNode instanceof Element ? replaceYouTubeIframe(domNode) : undefined),
32
+ };
@@ -1,170 +1,170 @@
1
- 'use client';
2
-
3
- import { useEffect, useState } from 'react';
4
- import Link from 'next/link';
5
- import { useTranslations } from '@nextblock-cms/utils';
6
- import { logConsentDecision } from '../../app/actions/consent';
7
- import { readConsent, writeConsent } from '../../lib/privacy/consent-client';
8
-
9
- /**
10
- * Minimal floating consent pill, bottom-right. Renders nothing once a decision
11
- * exists (the nb_consent_preference cookie). Decisions persist client-side and
12
- * are mirrored to privacy_consent_logs for accountability.
13
- */
14
- export function ConsentBanner() {
15
- const { lang, t } = useTranslations();
16
- const [visible, setVisible] = useState(false);
17
- const [managing, setManaging] = useState(false);
18
- const [analytics, setAnalytics] = useState(true);
19
- const [marketing, setMarketing] = useState(false);
20
- const isFrench = lang.toLowerCase().startsWith('fr');
21
-
22
- const translate = (key: string, fallback: string) => {
23
- const translated = t(key);
24
- return translated === key ? fallback : translated;
25
- };
26
-
27
- const privacyPolicyHref = translate(
28
- 'privacy.consent.privacy_policy_href',
29
- isFrench ? '/politique-de-confidentialite' : '/privacy-policy',
30
- );
31
-
32
- useEffect(() => {
33
- if (!readConsent()) setVisible(true);
34
- }, []);
35
-
36
- const decide = (choice: { analytics: boolean; marketing: boolean }) => {
37
- const pref = writeConsent(choice);
38
- void logConsentDecision({
39
- token: pref.token,
40
- analytics: choice.analytics,
41
- marketing: choice.marketing,
42
- });
43
- setVisible(false);
44
- };
45
-
46
- if (!visible) return null;
47
-
48
- return (
49
- <div
50
- role="dialog"
51
- aria-label={translate('privacy.consent.aria_label', 'Privacy consent')}
52
- className="fixed bottom-4 right-4 z-[70] w-[min(92vw,360px)] animate-in fade-in slide-in-from-bottom-2 duration-300"
53
- >
54
- <div className="rounded-2xl border border-slate-200/70 bg-white/95 p-4 shadow-[0_8px_30px_rgba(15,23,42,0.12)] backdrop-blur-md dark:border-slate-700/60 dark:bg-slate-900/95 dark:shadow-[0_8px_30px_rgba(0,0,0,0.5)]">
55
- <p className="text-sm font-medium text-slate-900 dark:text-slate-100">
56
- {translate('privacy.consent.title', 'We value your privacy')}
57
- </p>
58
- <p className="mt-1 text-xs leading-relaxed text-slate-500 dark:text-slate-400">
59
- {translate(
60
- 'privacy.consent.description_before_policy_link',
61
- 'We use only essential cookies by default. With your consent we also use analytics to improve the site. See our',
62
- )}{' '}
63
- <Link
64
- href={privacyPolicyHref}
65
- className="underline underline-offset-2 hover:text-slate-700 dark:hover:text-slate-200"
66
- >
67
- {translate('privacy.consent.privacy_policy_link', 'Privacy Policy')}
68
- </Link>
69
- {translate('privacy.consent.description_after_policy_link', '.')}
70
- </p>
71
-
72
- {managing && (
73
- <div className="mt-3 space-y-2 rounded-lg bg-slate-50 p-3 dark:bg-slate-800/60">
74
- <label className="flex items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
75
- <span>
76
- <span className="font-medium text-slate-800 dark:text-slate-200">
77
- {translate('privacy.consent.necessary_label', 'Necessary')}
78
- </span>
79
- <span className="block text-[11px] text-slate-400">
80
- {translate('privacy.consent.necessary_help', 'Always on')}
81
- </span>
82
- </span>
83
- <input
84
- type="checkbox"
85
- checked
86
- disabled
87
- className="h-4 w-4 accent-slate-400"
88
- />
89
- </label>
90
- <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
91
- <span>
92
- <span className="font-medium text-slate-800 dark:text-slate-200">
93
- {translate('privacy.consent.analytics_label', 'Analytics')}
94
- </span>
95
- <span className="block text-[11px] text-slate-400">
96
- {translate(
97
- 'privacy.consent.analytics_help',
98
- 'Usage insights',
99
- )}
100
- </span>
101
- </span>
102
- <input
103
- type="checkbox"
104
- checked={analytics}
105
- onChange={(e) => setAnalytics(e.target.checked)}
106
- className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
107
- />
108
- </label>
109
- <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
110
- <span>
111
- <span className="font-medium text-slate-800 dark:text-slate-200">
112
- {translate('privacy.consent.marketing_label', 'Marketing')}
113
- </span>
114
- <span className="block text-[11px] text-slate-400">
115
- {translate(
116
- 'privacy.consent.marketing_help',
117
- 'Personalized content',
118
- )}
119
- </span>
120
- </span>
121
- <input
122
- type="checkbox"
123
- checked={marketing}
124
- onChange={(e) => setMarketing(e.target.checked)}
125
- className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
126
- />
127
- </label>
128
- </div>
129
- )}
130
-
131
- <div className="mt-3 flex items-center gap-2">
132
- {managing ? (
133
- <button
134
- type="button"
135
- onClick={() => decide({ analytics, marketing })}
136
- className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
137
- >
138
- {translate('privacy.consent.save_choices', 'Save choices')}
139
- </button>
140
- ) : (
141
- <button
142
- type="button"
143
- onClick={() => decide({ analytics: true, marketing: true })}
144
- className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
145
- >
146
- {translate('privacy.consent.accept_all', 'Accept all')}
147
- </button>
148
- )}
149
- <button
150
- type="button"
151
- onClick={() => decide({ analytics: false, marketing: false })}
152
- className="rounded-lg border border-slate-200 px-3 py-2 text-xs font-medium text-slate-600 transition hover:bg-slate-50 dark:border-slate-700 dark:text-slate-300 dark:hover:bg-slate-800"
153
- >
154
- {translate('privacy.consent.reject_all', 'Reject all')}
155
- </button>
156
- </div>
157
-
158
- <button
159
- type="button"
160
- onClick={() => setManaging((prev) => !prev)}
161
- className="mt-2 w-full text-center text-[11px] text-slate-800 underline underline-offset-2 transition hover:text-slate-600 dark:hover:text-slate-300"
162
- >
163
- {managing
164
- ? translate('privacy.consent.hide_options', 'Hide options')
165
- : translate('privacy.consent.manage_options', 'Manage options')}
166
- </button>
167
- </div>
168
- </div>
169
- );
170
- }
1
+ 'use client';
2
+
3
+ import { useEffect, useState } from 'react';
4
+ import Link from 'next/link';
5
+ import { useTranslations } from '@nextblock-cms/utils';
6
+ import { logConsentDecision } from '../../app/actions/consent';
7
+ import { readConsent, writeConsent } from '../../lib/privacy/consent-client';
8
+
9
+ /**
10
+ * Minimal floating consent pill, bottom-right. Renders nothing once a decision
11
+ * exists (the nb_consent_preference cookie). Decisions persist client-side and
12
+ * are mirrored to privacy_consent_logs for accountability.
13
+ */
14
+ export function ConsentBanner() {
15
+ const { lang, t } = useTranslations();
16
+ const [visible, setVisible] = useState(false);
17
+ const [managing, setManaging] = useState(false);
18
+ const [analytics, setAnalytics] = useState(true);
19
+ const [marketing, setMarketing] = useState(false);
20
+ const isFrench = lang.toLowerCase().startsWith('fr');
21
+
22
+ const translate = (key: string, fallback: string) => {
23
+ const translated = t(key);
24
+ return translated === key ? fallback : translated;
25
+ };
26
+
27
+ const privacyPolicyHref = translate(
28
+ 'privacy.consent.privacy_policy_href',
29
+ isFrench ? '/politique-de-confidentialite' : '/privacy-policy',
30
+ );
31
+
32
+ useEffect(() => {
33
+ if (!readConsent()) setVisible(true);
34
+ }, []);
35
+
36
+ const decide = (choice: { analytics: boolean; marketing: boolean }) => {
37
+ const pref = writeConsent(choice);
38
+ void logConsentDecision({
39
+ token: pref.token,
40
+ analytics: choice.analytics,
41
+ marketing: choice.marketing,
42
+ });
43
+ setVisible(false);
44
+ };
45
+
46
+ if (!visible) return null;
47
+
48
+ return (
49
+ <div
50
+ role="dialog"
51
+ aria-label={translate('privacy.consent.aria_label', 'Privacy consent')}
52
+ className="fixed bottom-4 right-4 z-[70] w-[min(92vw,360px)] animate-in fade-in slide-in-from-bottom-2 duration-300"
53
+ >
54
+ <div className="rounded-2xl border border-slate-200/70 bg-white/95 p-4 shadow-[0_8px_30px_rgba(15,23,42,0.12)] backdrop-blur-md dark:border-slate-700/60 dark:bg-slate-900/95 dark:shadow-[0_8px_30px_rgba(0,0,0,0.5)]">
55
+ <p className="text-sm font-medium text-slate-900 dark:text-slate-100">
56
+ {translate('privacy.consent.title', 'We value your privacy')}
57
+ </p>
58
+ <p className="mt-1 text-xs leading-relaxed text-slate-500 dark:text-slate-400">
59
+ {translate(
60
+ 'privacy.consent.description_before_policy_link',
61
+ 'We use only essential cookies by default. With your consent we also use analytics to improve the site. See our',
62
+ )}{' '}
63
+ <Link
64
+ href={privacyPolicyHref}
65
+ className="underline underline-offset-2 hover:text-slate-700 dark:hover:text-slate-200"
66
+ >
67
+ {translate('privacy.consent.privacy_policy_link', 'Privacy Policy')}
68
+ </Link>
69
+ {translate('privacy.consent.description_after_policy_link', '.')}
70
+ </p>
71
+
72
+ {managing && (
73
+ <div className="mt-3 space-y-2 rounded-lg bg-slate-50 p-3 dark:bg-slate-800/60">
74
+ <label className="flex items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
75
+ <span>
76
+ <span className="font-medium text-slate-800 dark:text-slate-200">
77
+ {translate('privacy.consent.necessary_label', 'Necessary')}
78
+ </span>
79
+ <span className="block text-[11px] text-slate-400">
80
+ {translate('privacy.consent.necessary_help', 'Always on')}
81
+ </span>
82
+ </span>
83
+ <input
84
+ type="checkbox"
85
+ checked
86
+ disabled
87
+ className="h-4 w-4 accent-slate-400"
88
+ />
89
+ </label>
90
+ <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
91
+ <span>
92
+ <span className="font-medium text-slate-800 dark:text-slate-200">
93
+ {translate('privacy.consent.analytics_label', 'Analytics')}
94
+ </span>
95
+ <span className="block text-[11px] text-slate-400">
96
+ {translate(
97
+ 'privacy.consent.analytics_help',
98
+ 'Usage insights',
99
+ )}
100
+ </span>
101
+ </span>
102
+ <input
103
+ type="checkbox"
104
+ checked={analytics}
105
+ onChange={(e) => setAnalytics(e.target.checked)}
106
+ className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
107
+ />
108
+ </label>
109
+ <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
110
+ <span>
111
+ <span className="font-medium text-slate-800 dark:text-slate-200">
112
+ {translate('privacy.consent.marketing_label', 'Marketing')}
113
+ </span>
114
+ <span className="block text-[11px] text-slate-400">
115
+ {translate(
116
+ 'privacy.consent.marketing_help',
117
+ 'Personalized content',
118
+ )}
119
+ </span>
120
+ </span>
121
+ <input
122
+ type="checkbox"
123
+ checked={marketing}
124
+ onChange={(e) => setMarketing(e.target.checked)}
125
+ className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
126
+ />
127
+ </label>
128
+ </div>
129
+ )}
130
+
131
+ <div className="mt-3 flex items-center gap-2">
132
+ {managing ? (
133
+ <button
134
+ type="button"
135
+ onClick={() => decide({ analytics, marketing })}
136
+ className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
137
+ >
138
+ {translate('privacy.consent.save_choices', 'Save choices')}
139
+ </button>
140
+ ) : (
141
+ <button
142
+ type="button"
143
+ onClick={() => decide({ analytics: true, marketing: true })}
144
+ className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
145
+ >
146
+ {translate('privacy.consent.accept_all', 'Accept all')}
147
+ </button>
148
+ )}
149
+ <button
150
+ type="button"
151
+ onClick={() => decide({ analytics: false, marketing: false })}
152
+ className="rounded-lg border border-slate-200 px-3 py-2 text-xs font-medium text-slate-600 transition hover:bg-slate-50 dark:border-slate-700 dark:text-slate-300 dark:hover:bg-slate-800"
153
+ >
154
+ {translate('privacy.consent.reject_all', 'Reject all')}
155
+ </button>
156
+ </div>
157
+
158
+ <button
159
+ type="button"
160
+ onClick={() => setManaging((prev) => !prev)}
161
+ className="mt-2 w-full text-center text-[11px] text-slate-800 underline underline-offset-2 transition hover:text-slate-600 dark:hover:text-slate-300"
162
+ >
163
+ {managing
164
+ ? translate('privacy.consent.hide_options', 'Hide options')
165
+ : translate('privacy.consent.manage_options', 'Manage options')}
166
+ </button>
167
+ </div>
168
+ </div>
169
+ );
170
+ }