create-nextblock 0.14.1 → 0.14.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (241) hide show
  1. package/docker-template/.dockerignore +23 -23
  2. package/docker-template/.env.docker.example +69 -69
  3. package/docker-template/docker/db/init/99-jwt.sql +6 -6
  4. package/docker-template/docker/db/init/99-roles.sql +25 -25
  5. package/docker-template/docker/kong/kong.yml +112 -112
  6. package/docker-template/scripts/docker-setup.mjs +310 -310
  7. package/libs/db/tsconfig.lib.json +3 -3
  8. package/libs/editor/tsconfig.lib.json +3 -3
  9. package/libs/ui/tsconfig.lib.json +3 -3
  10. package/libs/utils/tsconfig.json +3 -3
  11. package/package.json +1 -1
  12. package/project.json +19 -19
  13. package/templates/nextblock-template/.browserslistrc +11 -11
  14. package/templates/nextblock-template/.dockerignore +23 -23
  15. package/templates/nextblock-template/README.md +34 -34
  16. package/templates/nextblock-template/app/(auth-pages)/layout.tsx +9 -9
  17. package/templates/nextblock-template/app/(auth-pages)/post-sign-in/page.tsx +27 -27
  18. package/templates/nextblock-template/app/(auth-pages)/sign-up/page.tsx +46 -46
  19. package/templates/nextblock-template/app/(auth-pages)/two-factor/page.tsx +51 -51
  20. package/templates/nextblock-template/app/ToasterProvider.tsx +17 -17
  21. package/templates/nextblock-template/app/[slug]/pageClientActions.ts +7 -7
  22. package/templates/nextblock-template/app/actions/consent.ts +57 -57
  23. package/templates/nextblock-template/app/actions/postActions.ts +146 -146
  24. package/templates/nextblock-template/app/actions/twoFactorEmail.ts +22 -22
  25. package/templates/nextblock-template/app/api/ai/cortex/build-widget/route.ts +153 -153
  26. package/templates/nextblock-template/app/api/ai/generate-blocks/route.ts +96 -96
  27. package/templates/nextblock-template/app/api/brand/email-logo/route.ts +48 -48
  28. package/templates/nextblock-template/app/api/cms/check-updates/route.ts +44 -44
  29. package/templates/nextblock-template/app/api/cms/full-backup/export/route.ts +33 -33
  30. package/templates/nextblock-template/app/api/cms/full-backup/restore/route.ts +63 -63
  31. package/templates/nextblock-template/app/api/cron/reset-sandbox/route.ts +3490 -3490
  32. package/templates/nextblock-template/app/api/cron/reset-sandbox/sandboxResetSql.ts +5749 -5749
  33. package/templates/nextblock-template/app/api/cron/sync-currencies/route.ts +39 -39
  34. package/templates/nextblock-template/app/api/custom-blocks/db-relations/route.ts +92 -92
  35. package/templates/nextblock-template/app/api/custom-blocks/editor-definitions/route.ts +43 -43
  36. package/templates/nextblock-template/app/api/media/library/route.ts +69 -69
  37. package/templates/nextblock-template/app/api/media/r2-presigned/route.ts +53 -53
  38. package/templates/nextblock-template/app/api/media/record/route.ts +160 -160
  39. package/templates/nextblock-template/app/api/search/route.ts +43 -43
  40. package/templates/nextblock-template/app/article/[slug]/PostClientContent.tsx +441 -441
  41. package/templates/nextblock-template/app/auth/callback/route.ts +31 -31
  42. package/templates/nextblock-template/app/cart/page.tsx +7 -7
  43. package/templates/nextblock-template/app/cms/blocks/components/CustomBlockEditorPreview.tsx +160 -160
  44. package/templates/nextblock-template/app/cms/blocks/components/MediaLibraryModal.tsx +149 -149
  45. package/templates/nextblock-template/app/cms/blocks/editors/DynamicCustomBlockEditor.tsx +167 -167
  46. package/templates/nextblock-template/app/cms/blocks/editors/ImageBlockEditor.tsx +4 -2
  47. package/templates/nextblock-template/app/cms/blocks/editors/TextBlockEditor.tsx +90 -90
  48. package/templates/nextblock-template/app/cms/components/ConnectGitHubButton.tsx +122 -122
  49. package/templates/nextblock-template/app/cms/components/CortexAiPageContext.tsx +58 -58
  50. package/templates/nextblock-template/app/cms/components/FeedbackModal.tsx +36 -36
  51. package/templates/nextblock-template/app/cms/components/SystemAlertsBanner.tsx +112 -112
  52. package/templates/nextblock-template/app/cms/components/TwoFactorReminderBanner.tsx +45 -45
  53. package/templates/nextblock-template/app/cms/components/github-connect-actions.ts +102 -102
  54. package/templates/nextblock-template/app/cms/components/system-alerts-actions.ts +31 -31
  55. package/templates/nextblock-template/app/cms/custom-blocks/[id]/edit/page.tsx +66 -66
  56. package/templates/nextblock-template/app/cms/custom-blocks/actions.ts +519 -519
  57. package/templates/nextblock-template/app/cms/custom-blocks/components/BlocksLibraryTransferControls.tsx +256 -256
  58. package/templates/nextblock-template/app/cms/custom-blocks/components/DBRelationSelect.tsx +384 -384
  59. package/templates/nextblock-template/app/cms/custom-blocks/components/ImageR2Picker.tsx +221 -221
  60. package/templates/nextblock-template/app/cms/custom-blocks/new/page.tsx +12 -12
  61. package/templates/nextblock-template/app/cms/custom-blocks/page.tsx +438 -438
  62. package/templates/nextblock-template/app/cms/dashboard/actions.ts +228 -228
  63. package/templates/nextblock-template/app/cms/dashboard/components/DashboardOnboarding.tsx +130 -130
  64. package/templates/nextblock-template/app/cms/import-export/actions.ts +226 -226
  65. package/templates/nextblock-template/app/cms/layout.tsx +73 -73
  66. package/templates/nextblock-template/app/cms/media/components/FolderNavigator.tsx +273 -273
  67. package/templates/nextblock-template/app/cms/media/components/FolderTree.tsx +122 -122
  68. package/templates/nextblock-template/app/cms/media/components/MediaEditForm.tsx +26 -26
  69. package/templates/nextblock-template/app/cms/media/components/MediaGridClient.tsx +69 -69
  70. package/templates/nextblock-template/app/cms/navigation/components/NavigationMenuDnd.tsx +3 -3
  71. package/templates/nextblock-template/app/cms/products/attributes/page.tsx +12 -12
  72. package/templates/nextblock-template/app/cms/products/categories/page.tsx +12 -12
  73. package/templates/nextblock-template/app/cms/products/inventory/page.tsx +13 -13
  74. package/templates/nextblock-template/app/cms/products/new/page.tsx +135 -135
  75. package/templates/nextblock-template/app/cms/products/productFormData.ts +133 -133
  76. package/templates/nextblock-template/app/cms/products/settings/page.tsx +5 -5
  77. package/templates/nextblock-template/app/cms/promotions/PromotionsWorkspace.tsx +456 -456
  78. package/templates/nextblock-template/app/cms/promotions/actions.ts +115 -115
  79. package/templates/nextblock-template/app/cms/promotions/page.tsx +31 -31
  80. package/templates/nextblock-template/app/cms/revisions/service.ts +19 -19
  81. package/templates/nextblock-template/app/cms/revisions/utils.ts +132 -132
  82. package/templates/nextblock-template/app/cms/settings/backup-restore/BackupRestoreWorkspace.tsx +1004 -1004
  83. package/templates/nextblock-template/app/cms/settings/backup-restore/page.tsx +29 -29
  84. package/templates/nextblock-template/app/cms/settings/bot-protection/page.tsx +24 -24
  85. package/templates/nextblock-template/app/cms/settings/cortex-ai/SandboxCortexAiSettingsClient.tsx +688 -688
  86. package/templates/nextblock-template/app/cms/settings/currencies/actions.ts +331 -331
  87. package/templates/nextblock-template/app/cms/settings/currencies/page.tsx +494 -494
  88. package/templates/nextblock-template/app/cms/settings/email/page.tsx +28 -28
  89. package/templates/nextblock-template/app/cms/settings/extra-translations/ExtraTranslationsWorkspace.tsx +767 -767
  90. package/templates/nextblock-template/app/cms/settings/extra-translations/page.tsx +93 -93
  91. package/templates/nextblock-template/app/cms/settings/google-analytics/page.tsx +26 -26
  92. package/templates/nextblock-template/app/cms/settings/logos/[id]/edit/page.tsx +7 -7
  93. package/templates/nextblock-template/app/cms/settings/logos/components/BrandingSettingsForm.tsx +339 -339
  94. package/templates/nextblock-template/app/cms/settings/logos/components/DeleteLogoButton.tsx +21 -21
  95. package/templates/nextblock-template/app/cms/settings/logos/components/LogoForm.tsx +23 -21
  96. package/templates/nextblock-template/app/cms/settings/logos/components/SetActiveLogoButton.tsx +42 -42
  97. package/templates/nextblock-template/app/cms/settings/logos/components/SiteSeoSettingsForm.tsx +133 -133
  98. package/templates/nextblock-template/app/cms/settings/logos/new/page.tsx +8 -8
  99. package/templates/nextblock-template/app/cms/settings/packages/package-card.tsx +122 -122
  100. package/templates/nextblock-template/app/cms/settings/privacy/page.tsx +27 -27
  101. package/templates/nextblock-template/app/cms/settings/registration/page.tsx +27 -27
  102. package/templates/nextblock-template/app/cms/settings/security/components/SecurityPanel.tsx +9 -7
  103. package/templates/nextblock-template/app/cms/settings/security/page.tsx +33 -33
  104. package/templates/nextblock-template/app/cms/settings/taxes/page.tsx +21 -21
  105. package/templates/nextblock-template/app/cms/shipping/page.tsx +20 -20
  106. package/templates/nextblock-template/app/cms/users/components/DeleteUserButton.tsx +12 -12
  107. package/templates/nextblock-template/app/lib/site-settings.ts +105 -105
  108. package/templates/nextblock-template/app/profile/ProfilePageHeader.tsx +16 -16
  109. package/templates/nextblock-template/app/profile/ProfilePageMissingState.tsx +9 -9
  110. package/templates/nextblock-template/app/profile/account-links.ts +22 -22
  111. package/templates/nextblock-template/app/profile/orders/CustomerOrdersPageClient.tsx +124 -124
  112. package/templates/nextblock-template/app/profile/orders/page.tsx +19 -19
  113. package/templates/nextblock-template/app/profile/password/PasswordSettingsPageClient.tsx +128 -128
  114. package/templates/nextblock-template/app/profile/password/actions.ts +59 -59
  115. package/templates/nextblock-template/app/profile/password/page.tsx +27 -27
  116. package/templates/nextblock-template/app/setup/SetupWizard.tsx +678 -678
  117. package/templates/nextblock-template/app/setup/layout.tsx +13 -13
  118. package/templates/nextblock-template/app/setup/page.tsx +111 -111
  119. package/templates/nextblock-template/app/sitemap.ts +130 -130
  120. package/templates/nextblock-template/components/CartDrawerLoader.tsx +7 -7
  121. package/templates/nextblock-template/components/DeferredCartDrawer.tsx +23 -23
  122. package/templates/nextblock-template/components/DeferredGoogleAnalytics.tsx +70 -70
  123. package/templates/nextblock-template/components/DeferredGoogleTagManager.tsx +70 -70
  124. package/templates/nextblock-template/components/DeferredSpeedInsights.tsx +69 -69
  125. package/templates/nextblock-template/components/FeatureImageHero.tsx +47 -47
  126. package/templates/nextblock-template/components/FooterNavigation.tsx +32 -32
  127. package/templates/nextblock-template/components/HtmlScriptExecutor.tsx +47 -47
  128. package/templates/nextblock-template/components/LanguageSwitcher.tsx +2 -2
  129. package/templates/nextblock-template/components/PublicEnvBootstrap.tsx +30 -30
  130. package/templates/nextblock-template/components/ResponsiveNav.tsx +14 -14
  131. package/templates/nextblock-template/components/auth/AuthBotProtection.tsx +182 -182
  132. package/templates/nextblock-template/components/blocks/PostCardSkeleton.tsx +12 -12
  133. package/templates/nextblock-template/components/blocks/PostsGridBlock.tsx +12 -12
  134. package/templates/nextblock-template/components/blocks/ecommerceRendererLoaders.ts +23 -23
  135. package/templates/nextblock-template/components/blocks/renderers/FormBlockRenderer.tsx +249 -249
  136. package/templates/nextblock-template/components/blocks/types.ts +7 -7
  137. package/templates/nextblock-template/components/env-var-warning.tsx +3 -3
  138. package/templates/nextblock-template/components/form-message.tsx +32 -32
  139. package/templates/nextblock-template/components/media/YouTubeFacade.tsx +105 -105
  140. package/templates/nextblock-template/components/media/youtube-embed-replace.tsx +32 -32
  141. package/templates/nextblock-template/components/privacy/ConsentBanner.tsx +170 -170
  142. package/templates/nextblock-template/components/privacy/ConsentGatedAnalytics.tsx +70 -70
  143. package/templates/nextblock-template/components/renderers/CachedDynamicLayoutEngine.tsx +28 -28
  144. package/templates/nextblock-template/components/renderers/DynamicLayoutEngine.test.tsx +166 -166
  145. package/templates/nextblock-template/components/renderers/DynamicLayoutEngine.tsx +471 -471
  146. package/templates/nextblock-template/components/submit-button.tsx +23 -23
  147. package/templates/nextblock-template/components/theme-switcher.tsx +8 -8
  148. package/templates/nextblock-template/components/visual-editing/DeferredVisualEditing.tsx +21 -21
  149. package/templates/nextblock-template/context/AuthContext.tsx +23 -23
  150. package/templates/nextblock-template/context/language-rest-client.ts +32 -32
  151. package/templates/nextblock-template/docker/db/init/99-jwt.sql +6 -6
  152. package/templates/nextblock-template/docker/db/init/99-roles.sql +25 -25
  153. package/templates/nextblock-template/docker/kong/kong.yml +112 -112
  154. package/templates/nextblock-template/docs/01-PROJECT-OVERVIEW.md +94 -94
  155. package/templates/nextblock-template/docs/02-ECOMMERCE-CAPABILITIES.md +364 -364
  156. package/templates/nextblock-template/docs/03-CMS-AND-EDITOR.md +202 -202
  157. package/templates/nextblock-template/docs/04-DATABASE-AND-AUTH.md +246 -246
  158. package/templates/nextblock-template/docs/06-CLI-AND-SCAFFOLDING.md +176 -176
  159. package/templates/nextblock-template/docs/07-BLOCK-SDK-AND-EXTENSIBILITY.md +146 -146
  160. package/templates/nextblock-template/docs/10-CUSTOM-BLOCKS.md +222 -222
  161. package/templates/nextblock-template/docs/11-SELF-HOSTED-DOCKER.md +173 -173
  162. package/templates/nextblock-template/docs/12-VERCEL-DEPLOYMENT.md +170 -170
  163. package/templates/nextblock-template/docs/13-STAYING-UP-TO-DATE.md +151 -151
  164. package/templates/nextblock-template/docs/README.md +39 -39
  165. package/templates/nextblock-template/hooks/use-hotkeys.ts +21 -21
  166. package/templates/nextblock-template/hooks/useGlobalSearch.ts +101 -101
  167. package/templates/nextblock-template/index.d.ts +7 -7
  168. package/templates/nextblock-template/lib/app-secrets.ts +39 -39
  169. package/templates/nextblock-template/lib/auth/cookies.ts +47 -47
  170. package/templates/nextblock-template/lib/auth/crypto.ts +45 -45
  171. package/templates/nextblock-template/lib/auth/trustedDevices.ts +92 -92
  172. package/templates/nextblock-template/lib/auth-redirects.ts +46 -46
  173. package/templates/nextblock-template/lib/blocks/README.md +13 -13
  174. package/templates/nextblock-template/lib/botProtection/verify.ts +134 -134
  175. package/templates/nextblock-template/lib/cms-transfer/server.ts +2243 -2243
  176. package/templates/nextblock-template/lib/cms-transfer/types.ts +145 -145
  177. package/templates/nextblock-template/lib/custom-block-definitions.ts +87 -87
  178. package/templates/nextblock-template/lib/custom-block-r2-upload-shared.ts +178 -178
  179. package/templates/nextblock-template/lib/custom-block-r2-upload.test.ts +140 -140
  180. package/templates/nextblock-template/lib/custom-block-r2-upload.ts +88 -88
  181. package/templates/nextblock-template/lib/custom-block-relations.test.ts +227 -227
  182. package/templates/nextblock-template/lib/custom-block-relations.ts +279 -279
  183. package/templates/nextblock-template/lib/custom-block-safelist.ts +14 -14
  184. package/templates/nextblock-template/lib/editor/dynamic-extension-core.test.ts +172 -172
  185. package/templates/nextblock-template/lib/editor/dynamic-extension-core.ts +213 -213
  186. package/templates/nextblock-template/lib/editor/dynamic-extension-loader.ts +22 -22
  187. package/templates/nextblock-template/lib/editor/dynamic-extensions.tsx +193 -193
  188. package/templates/nextblock-template/lib/email/branding-format.test.ts +133 -133
  189. package/templates/nextblock-template/lib/email/branding-format.ts +123 -123
  190. package/templates/nextblock-template/lib/email/branding.ts +76 -76
  191. package/templates/nextblock-template/lib/full-backup/manifest.test.ts +121 -121
  192. package/templates/nextblock-template/lib/full-backup/manifest.ts +206 -206
  193. package/templates/nextblock-template/lib/full-backup/server.ts +743 -743
  194. package/templates/nextblock-template/lib/logos/active-logo.ts +53 -53
  195. package/templates/nextblock-template/lib/media/resolveMediaUrl.ts +54 -54
  196. package/templates/nextblock-template/lib/media/youtube.ts +99 -99
  197. package/templates/nextblock-template/lib/onboarding/actions.ts +31 -31
  198. package/templates/nextblock-template/lib/onboarding/status.ts +222 -222
  199. package/templates/nextblock-template/lib/posts/readTime.ts +60 -60
  200. package/templates/nextblock-template/lib/privacy/consent-client.ts +57 -57
  201. package/templates/nextblock-template/lib/privacy/contact-emails.ts +64 -64
  202. package/templates/nextblock-template/lib/privacy/settings.ts +115 -115
  203. package/templates/nextblock-template/lib/privacy/types.ts +69 -69
  204. package/templates/nextblock-template/lib/promotions/server.test.ts +74 -74
  205. package/templates/nextblock-template/lib/promotions/server.ts +741 -741
  206. package/templates/nextblock-template/lib/resolve-block-relations.test.ts +142 -142
  207. package/templates/nextblock-template/lib/resolve-block-relations.ts +255 -255
  208. package/templates/nextblock-template/lib/search/types.ts +27 -27
  209. package/templates/nextblock-template/lib/setup/actions.ts +460 -460
  210. package/templates/nextblock-template/lib/setup/env-status.ts +125 -125
  211. package/templates/nextblock-template/lib/setup/env-write.ts +111 -111
  212. package/templates/nextblock-template/lib/setup/migrations-bundle.ts +87 -87
  213. package/templates/nextblock-template/lib/setup/provisioning.ts +59 -59
  214. package/templates/nextblock-template/lib/setup/schema-apply.ts +408 -408
  215. package/templates/nextblock-template/lib/setup/system-config.ts +105 -105
  216. package/templates/nextblock-template/lib/setup/types.ts +18 -18
  217. package/templates/nextblock-template/lib/site-url.ts +48 -48
  218. package/templates/nextblock-template/lib/storage/provider.ts +66 -66
  219. package/templates/nextblock-template/lib/storage/supabase-storage.ts +103 -103
  220. package/templates/nextblock-template/lib/updates/check-upstream.ts +441 -441
  221. package/templates/nextblock-template/lib/updates/github-device.ts +206 -206
  222. package/templates/nextblock-template/lib/updates/repo-identity.ts +56 -56
  223. package/templates/nextblock-template/package.json +1 -1
  224. package/templates/nextblock-template/postcss.config.js +6 -6
  225. package/templates/nextblock-template/scripts/backup.js +115 -115
  226. package/templates/nextblock-template/scripts/docker-setup.mjs +310 -310
  227. package/templates/nextblock-template/scripts/restore.js +385 -385
  228. package/templates/nextblock-template/scripts/verify-cortex-ai-build-widget.tsx +98 -98
  229. package/templates/nextblock-template/scripts/verify-cortex-ai-generate-blocks.ts +62 -62
  230. package/templates/nextblock-template/scripts/verify-cortex-ai-global-tools.ts +537 -537
  231. package/templates/nextblock-template/scripts/verify-cortex-ai-routing.ts +58 -58
  232. package/templates/nextblock-template/scripts/verify-custom-block-definitions.ts +188 -188
  233. package/templates/nextblock-template/scripts/verify-dynamic-custom-block-extensions.ts +123 -123
  234. package/templates/nextblock-template/scripts/verify-dynamic-layout-engine.tsx +133 -133
  235. package/templates/nextblock-template/scripts/verify-milestone-2-custom-blocks.ts +65 -65
  236. package/templates/nextblock-template/tailwind.config.js +25 -25
  237. package/templates/nextblock-template/tools/build-migrate.mjs +209 -209
  238. package/templates/nextblock-template/tools/configure-supabase-auth.js +282 -282
  239. package/templates/nextblock-template/tsconfig.tsbuildinfo +1 -1
  240. package/templates/nextblock-template/types/jsdom.d.ts +6 -6
  241. package/tsconfig.base.json +3 -3
@@ -1,88 +1,88 @@
1
- import 'server-only';
2
-
3
- import { PutObjectCommand } from '@aws-sdk/client-s3';
4
- import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
5
- import { getS3PresignClient } from '@nextblock-cms/utils/server';
6
-
7
- import { resolveMediaUrl } from './media/resolveMediaUrl';
8
- import { getStorageBackend, getStorageBucket } from './storage/provider';
9
- import { supabaseCreateSignedUpload } from './storage/supabase-storage';
10
- import {
11
- buildR2UploadObjectKey,
12
- R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
13
- R2PresignedUploadError,
14
- type R2PresignedUploadResult,
15
- type ValidR2PresignedUploadPayload,
16
- } from './custom-block-r2-upload-shared';
17
-
18
- export {
19
- buildR2UploadObjectKey,
20
- R2_PRESIGNED_UPLOAD_ALLOWED_CONTENT_TYPES,
21
- R2_PRESIGNED_UPLOAD_DEFAULT_FOLDER,
22
- R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
23
- R2_PRESIGNED_UPLOAD_MAX_BYTES,
24
- R2PresignedUploadError,
25
- sanitizeR2UploadFolder,
26
- validateR2PresignedUploadPayload,
27
- type R2PresignedUploadResult,
28
- type ValidR2PresignedUploadPayload,
29
- } from './custom-block-r2-upload-shared';
30
-
31
- export async function createR2PresignedUpload(
32
- payload: ValidR2PresignedUploadPayload,
33
- options: { now?: Date; nonce?: string; userId: string }
34
- ): Promise<R2PresignedUploadResult> {
35
- const backend = getStorageBackend();
36
- const bucketName = getStorageBucket();
37
- if (!bucketName) {
38
- throw new R2PresignedUploadError('File uploads are not configured on this server.', 500);
39
- }
40
-
41
- const objectKey = buildR2UploadObjectKey(payload, options);
42
- const publicUrl = resolveMediaUrl(objectKey) ?? `/${objectKey}`;
43
-
44
- if (backend === 'supabase') {
45
- // Native Supabase Storage: a signed upload URL the browser PUTs to directly.
46
- const { signedUrl } = await supabaseCreateSignedUpload(objectKey);
47
- return {
48
- expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
49
- headers: {
50
- 'Content-Type': payload.contentType,
51
- },
52
- method: 'PUT',
53
- objectKey,
54
- presignedUrl: signedUrl,
55
- publicUrl,
56
- uploadUrl: signedUrl,
57
- };
58
- }
59
-
60
- const s3Client = await getS3PresignClient();
61
- if (!s3Client) {
62
- throw new R2PresignedUploadError('File uploads are not configured on this server.', 500);
63
- }
64
-
65
- const command = new PutObjectCommand({
66
- Bucket: bucketName,
67
- ContentType: payload.contentType,
68
- Key: objectKey,
69
- Metadata: {
70
- 'uploader-user-id': options.userId,
71
- },
72
- });
73
- const presignedUrl = await getSignedUrl(s3Client, command, {
74
- expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
75
- });
76
-
77
- return {
78
- expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
79
- headers: {
80
- 'Content-Type': payload.contentType,
81
- },
82
- method: 'PUT',
83
- objectKey,
84
- presignedUrl,
85
- publicUrl,
86
- uploadUrl: presignedUrl,
87
- };
88
- }
1
+ import 'server-only';
2
+
3
+ import { PutObjectCommand } from '@aws-sdk/client-s3';
4
+ import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
5
+ import { getS3PresignClient } from '@nextblock-cms/utils/server';
6
+
7
+ import { resolveMediaUrl } from './media/resolveMediaUrl';
8
+ import { getStorageBackend, getStorageBucket } from './storage/provider';
9
+ import { supabaseCreateSignedUpload } from './storage/supabase-storage';
10
+ import {
11
+ buildR2UploadObjectKey,
12
+ R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
13
+ R2PresignedUploadError,
14
+ type R2PresignedUploadResult,
15
+ type ValidR2PresignedUploadPayload,
16
+ } from './custom-block-r2-upload-shared';
17
+
18
+ export {
19
+ buildR2UploadObjectKey,
20
+ R2_PRESIGNED_UPLOAD_ALLOWED_CONTENT_TYPES,
21
+ R2_PRESIGNED_UPLOAD_DEFAULT_FOLDER,
22
+ R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
23
+ R2_PRESIGNED_UPLOAD_MAX_BYTES,
24
+ R2PresignedUploadError,
25
+ sanitizeR2UploadFolder,
26
+ validateR2PresignedUploadPayload,
27
+ type R2PresignedUploadResult,
28
+ type ValidR2PresignedUploadPayload,
29
+ } from './custom-block-r2-upload-shared';
30
+
31
+ export async function createR2PresignedUpload(
32
+ payload: ValidR2PresignedUploadPayload,
33
+ options: { now?: Date; nonce?: string; userId: string }
34
+ ): Promise<R2PresignedUploadResult> {
35
+ const backend = getStorageBackend();
36
+ const bucketName = getStorageBucket();
37
+ if (!bucketName) {
38
+ throw new R2PresignedUploadError('File uploads are not configured on this server.', 500);
39
+ }
40
+
41
+ const objectKey = buildR2UploadObjectKey(payload, options);
42
+ const publicUrl = resolveMediaUrl(objectKey) ?? `/${objectKey}`;
43
+
44
+ if (backend === 'supabase') {
45
+ // Native Supabase Storage: a signed upload URL the browser PUTs to directly.
46
+ const { signedUrl } = await supabaseCreateSignedUpload(objectKey);
47
+ return {
48
+ expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
49
+ headers: {
50
+ 'Content-Type': payload.contentType,
51
+ },
52
+ method: 'PUT',
53
+ objectKey,
54
+ presignedUrl: signedUrl,
55
+ publicUrl,
56
+ uploadUrl: signedUrl,
57
+ };
58
+ }
59
+
60
+ const s3Client = await getS3PresignClient();
61
+ if (!s3Client) {
62
+ throw new R2PresignedUploadError('File uploads are not configured on this server.', 500);
63
+ }
64
+
65
+ const command = new PutObjectCommand({
66
+ Bucket: bucketName,
67
+ ContentType: payload.contentType,
68
+ Key: objectKey,
69
+ Metadata: {
70
+ 'uploader-user-id': options.userId,
71
+ },
72
+ });
73
+ const presignedUrl = await getSignedUrl(s3Client, command, {
74
+ expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
75
+ });
76
+
77
+ return {
78
+ expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
79
+ headers: {
80
+ 'Content-Type': payload.contentType,
81
+ },
82
+ method: 'PUT',
83
+ objectKey,
84
+ presignedUrl,
85
+ publicUrl,
86
+ uploadUrl: presignedUrl,
87
+ };
88
+ }
@@ -1,227 +1,227 @@
1
- import { describe, expect, it, vi } from 'vitest';
2
-
3
- vi.mock('server-only', () => ({}));
4
-
5
- import {
6
- getCustomBlockRelationTarget,
7
- listCustomBlockRelationTargets,
8
- } from './custom-block-relation-registry';
9
- import { searchCustomBlockRelationRows } from './custom-block-relations';
10
-
11
- class MockSupabaseQuery {
12
- operations: Array<{ args: unknown[]; op: string }> = [];
13
-
14
- constructor(private readonly rows: Array<Record<string, unknown>>) {}
15
-
16
- select(...args: unknown[]) {
17
- this.operations.push({ args, op: 'select' });
18
- return this;
19
- }
20
-
21
- limit(...args: unknown[]) {
22
- this.operations.push({ args, op: 'limit' });
23
- return this;
24
- }
25
-
26
- eq(...args: unknown[]) {
27
- this.operations.push({ args, op: 'eq' });
28
- return this;
29
- }
30
-
31
- in(...args: unknown[]) {
32
- this.operations.push({ args, op: 'in' });
33
- return this;
34
- }
35
-
36
- or(...args: unknown[]) {
37
- this.operations.push({ args, op: 'or' });
38
- return this;
39
- }
40
-
41
- order(...args: unknown[]) {
42
- this.operations.push({ args, op: 'order' });
43
- return this;
44
- }
45
-
46
- then(resolve: (value: { data: Array<Record<string, unknown>>; error: null }) => unknown) {
47
- return Promise.resolve({ data: this.rows, error: null }).then(resolve);
48
- }
49
- }
50
-
51
- describe('custom block relation registry and search', () => {
52
- it('exposes a curated allowlist of relation targets', () => {
53
- expect(listCustomBlockRelationTargets().map((target) => target.table)).toEqual([
54
- 'pages',
55
- 'posts',
56
- 'products',
57
- 'product_variants',
58
- 'media',
59
- 'categories',
60
- 'profiles',
61
- 'languages',
62
- ]);
63
- expect(getCustomBlockRelationTarget('orders')).toBeUndefined();
64
- });
65
-
66
- it('rejects tables outside the allowlist', async () => {
67
- const result = await searchCustomBlockRelationRows({} as any, {
68
- table: 'orders',
69
- });
70
-
71
- expect(result).toEqual({
72
- error: 'Relation table "orders" is not available.',
73
- status: 400,
74
- });
75
- });
76
-
77
- it('searches allowed tables with capped limits and active filters', async () => {
78
- const query = new MockSupabaseQuery([
79
- {
80
- id: 1,
81
- slug: 'home',
82
- status: 'published',
83
- title: 'Home',
84
- },
85
- ]);
86
- const from = vi.fn(() => query);
87
-
88
- const result = await searchCustomBlockRelationRows({ from } as any, {
89
- limit: '500',
90
- query: 'home',
91
- table: 'pages',
92
- });
93
-
94
- expect(from).toHaveBeenCalledWith('pages');
95
- expect(query.operations).toContainEqual({ args: [50], op: 'limit' });
96
- expect(query.operations).toContainEqual({ args: ['status', 'published'], op: 'eq' });
97
- expect(query.operations.some((operation) => operation.op === 'or')).toBe(true);
98
- expect(result).toMatchObject({
99
- items: [
100
- {
101
- description: 'home - published',
102
- label: 'Home',
103
- table: 'pages',
104
- value: '1',
105
- },
106
- ],
107
- });
108
- });
109
-
110
- it('fetches requested values with normalized numeric IDs', async () => {
111
- const query = new MockSupabaseQuery([
112
- {
113
- code: 'en',
114
- id: 1,
115
- is_active: true,
116
- name: 'English',
117
- },
118
- ]);
119
- const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
120
- table: 'languages',
121
- values: ['1', 'not-a-number'],
122
- });
123
-
124
- expect(query.operations).toContainEqual({ args: ['id', [1]], op: 'in' });
125
- expect(result).toMatchObject({
126
- items: [
127
- {
128
- description: 'en',
129
- label: 'English',
130
- value: '1',
131
- },
132
- ],
133
- });
134
- });
135
-
136
- it('maps products product_media joins to a flat virtual images list and default image', async () => {
137
- const query = new MockSupabaseQuery([
138
- {
139
- id: 'p-1',
140
- title: 'Wireless Headphones',
141
- short_description: 'Premium headphones',
142
- product_media: [
143
- {
144
- media: {
145
- id: 'm-1',
146
- object_key: 'headphone-image.png',
147
- file_name: 'headphones.png',
148
- file_type: 'image/png',
149
- },
150
- },
151
- ],
152
- },
153
- ]);
154
- const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
155
- table: 'products',
156
- values: ['p-1'],
157
- });
158
-
159
- expect(result).toMatchObject({
160
- items: [
161
- {
162
- label: 'Wireless Headphones',
163
- value: 'p-1',
164
- record: {
165
- images: [
166
- {
167
- id: 'm-1',
168
- object_key: 'headphone-image.png',
169
- file_name: 'headphones.png',
170
- file_type: 'image/png',
171
- },
172
- ],
173
- image: {
174
- id: 'm-1',
175
- object_key: 'headphone-image.png',
176
- },
177
- object_key: 'headphone-image.png',
178
- main_image: 'headphone-image.png',
179
- },
180
- },
181
- ],
182
- });
183
- });
184
-
185
- it('maps product_variants parent products (as object or array) to a friendly label', async () => {
186
- const query = new MockSupabaseQuery([
187
- {
188
- id: 'v-1',
189
- sku: 'NB-SIGNAL-CAP-L',
190
- price: 2600,
191
- products: {
192
- id: 'p-1',
193
- title: 'Signal Cap',
194
- },
195
- },
196
- {
197
- id: 'v-2',
198
- sku: 'NB-STUDIO-TEE-M',
199
- price: 3200,
200
- products: [
201
- {
202
- id: 'p-2',
203
- title: 'Studio Tee',
204
- },
205
- ],
206
- },
207
- ]);
208
-
209
- const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
210
- table: 'product_variants',
211
- values: ['v-1', 'v-2'],
212
- });
213
-
214
- expect(result).toMatchObject({
215
- items: [
216
- {
217
- label: 'Signal Cap (NB-SIGNAL-CAP-L)',
218
- value: 'v-1',
219
- },
220
- {
221
- label: 'Studio Tee (NB-STUDIO-TEE-M)',
222
- value: 'v-2',
223
- },
224
- ],
225
- });
226
- });
227
- });
1
+ import { describe, expect, it, vi } from 'vitest';
2
+
3
+ vi.mock('server-only', () => ({}));
4
+
5
+ import {
6
+ getCustomBlockRelationTarget,
7
+ listCustomBlockRelationTargets,
8
+ } from './custom-block-relation-registry';
9
+ import { searchCustomBlockRelationRows } from './custom-block-relations';
10
+
11
+ class MockSupabaseQuery {
12
+ operations: Array<{ args: unknown[]; op: string }> = [];
13
+
14
+ constructor(private readonly rows: Array<Record<string, unknown>>) {}
15
+
16
+ select(...args: unknown[]) {
17
+ this.operations.push({ args, op: 'select' });
18
+ return this;
19
+ }
20
+
21
+ limit(...args: unknown[]) {
22
+ this.operations.push({ args, op: 'limit' });
23
+ return this;
24
+ }
25
+
26
+ eq(...args: unknown[]) {
27
+ this.operations.push({ args, op: 'eq' });
28
+ return this;
29
+ }
30
+
31
+ in(...args: unknown[]) {
32
+ this.operations.push({ args, op: 'in' });
33
+ return this;
34
+ }
35
+
36
+ or(...args: unknown[]) {
37
+ this.operations.push({ args, op: 'or' });
38
+ return this;
39
+ }
40
+
41
+ order(...args: unknown[]) {
42
+ this.operations.push({ args, op: 'order' });
43
+ return this;
44
+ }
45
+
46
+ then(resolve: (value: { data: Array<Record<string, unknown>>; error: null }) => unknown) {
47
+ return Promise.resolve({ data: this.rows, error: null }).then(resolve);
48
+ }
49
+ }
50
+
51
+ describe('custom block relation registry and search', () => {
52
+ it('exposes a curated allowlist of relation targets', () => {
53
+ expect(listCustomBlockRelationTargets().map((target) => target.table)).toEqual([
54
+ 'pages',
55
+ 'posts',
56
+ 'products',
57
+ 'product_variants',
58
+ 'media',
59
+ 'categories',
60
+ 'profiles',
61
+ 'languages',
62
+ ]);
63
+ expect(getCustomBlockRelationTarget('orders')).toBeUndefined();
64
+ });
65
+
66
+ it('rejects tables outside the allowlist', async () => {
67
+ const result = await searchCustomBlockRelationRows({} as any, {
68
+ table: 'orders',
69
+ });
70
+
71
+ expect(result).toEqual({
72
+ error: 'Relation table "orders" is not available.',
73
+ status: 400,
74
+ });
75
+ });
76
+
77
+ it('searches allowed tables with capped limits and active filters', async () => {
78
+ const query = new MockSupabaseQuery([
79
+ {
80
+ id: 1,
81
+ slug: 'home',
82
+ status: 'published',
83
+ title: 'Home',
84
+ },
85
+ ]);
86
+ const from = vi.fn(() => query);
87
+
88
+ const result = await searchCustomBlockRelationRows({ from } as any, {
89
+ limit: '500',
90
+ query: 'home',
91
+ table: 'pages',
92
+ });
93
+
94
+ expect(from).toHaveBeenCalledWith('pages');
95
+ expect(query.operations).toContainEqual({ args: [50], op: 'limit' });
96
+ expect(query.operations).toContainEqual({ args: ['status', 'published'], op: 'eq' });
97
+ expect(query.operations.some((operation) => operation.op === 'or')).toBe(true);
98
+ expect(result).toMatchObject({
99
+ items: [
100
+ {
101
+ description: 'home - published',
102
+ label: 'Home',
103
+ table: 'pages',
104
+ value: '1',
105
+ },
106
+ ],
107
+ });
108
+ });
109
+
110
+ it('fetches requested values with normalized numeric IDs', async () => {
111
+ const query = new MockSupabaseQuery([
112
+ {
113
+ code: 'en',
114
+ id: 1,
115
+ is_active: true,
116
+ name: 'English',
117
+ },
118
+ ]);
119
+ const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
120
+ table: 'languages',
121
+ values: ['1', 'not-a-number'],
122
+ });
123
+
124
+ expect(query.operations).toContainEqual({ args: ['id', [1]], op: 'in' });
125
+ expect(result).toMatchObject({
126
+ items: [
127
+ {
128
+ description: 'en',
129
+ label: 'English',
130
+ value: '1',
131
+ },
132
+ ],
133
+ });
134
+ });
135
+
136
+ it('maps products product_media joins to a flat virtual images list and default image', async () => {
137
+ const query = new MockSupabaseQuery([
138
+ {
139
+ id: 'p-1',
140
+ title: 'Wireless Headphones',
141
+ short_description: 'Premium headphones',
142
+ product_media: [
143
+ {
144
+ media: {
145
+ id: 'm-1',
146
+ object_key: 'headphone-image.png',
147
+ file_name: 'headphones.png',
148
+ file_type: 'image/png',
149
+ },
150
+ },
151
+ ],
152
+ },
153
+ ]);
154
+ const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
155
+ table: 'products',
156
+ values: ['p-1'],
157
+ });
158
+
159
+ expect(result).toMatchObject({
160
+ items: [
161
+ {
162
+ label: 'Wireless Headphones',
163
+ value: 'p-1',
164
+ record: {
165
+ images: [
166
+ {
167
+ id: 'm-1',
168
+ object_key: 'headphone-image.png',
169
+ file_name: 'headphones.png',
170
+ file_type: 'image/png',
171
+ },
172
+ ],
173
+ image: {
174
+ id: 'm-1',
175
+ object_key: 'headphone-image.png',
176
+ },
177
+ object_key: 'headphone-image.png',
178
+ main_image: 'headphone-image.png',
179
+ },
180
+ },
181
+ ],
182
+ });
183
+ });
184
+
185
+ it('maps product_variants parent products (as object or array) to a friendly label', async () => {
186
+ const query = new MockSupabaseQuery([
187
+ {
188
+ id: 'v-1',
189
+ sku: 'NB-SIGNAL-CAP-L',
190
+ price: 2600,
191
+ products: {
192
+ id: 'p-1',
193
+ title: 'Signal Cap',
194
+ },
195
+ },
196
+ {
197
+ id: 'v-2',
198
+ sku: 'NB-STUDIO-TEE-M',
199
+ price: 3200,
200
+ products: [
201
+ {
202
+ id: 'p-2',
203
+ title: 'Studio Tee',
204
+ },
205
+ ],
206
+ },
207
+ ]);
208
+
209
+ const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
210
+ table: 'product_variants',
211
+ values: ['v-1', 'v-2'],
212
+ });
213
+
214
+ expect(result).toMatchObject({
215
+ items: [
216
+ {
217
+ label: 'Signal Cap (NB-SIGNAL-CAP-L)',
218
+ value: 'v-1',
219
+ },
220
+ {
221
+ label: 'Studio Tee (NB-STUDIO-TEE-M)',
222
+ value: 'v-2',
223
+ },
224
+ ],
225
+ });
226
+ });
227
+ });