create-nextblock 0.14.4 → 0.14.5

package/templates/nextblock-template/app/api/cron/reset-sandbox/sandboxResetSql.ts

@@ -6154,6 +6154,365 @@ VALUES
 ON CONFLICT (slug) DO NOTHING;
 
 
+-- >>> FROM: 00000000000015_scheduled_publishing.sql <<<
+-- Scheduled publishing for pages and products.
+--
+-- Posts already support scheduling: \`posts.published_at\` exists and every public
+-- read gates on \`published_at IS NULL OR published_at <= now()\`, so a row with
+-- status='published' and a future date is withheld until the date passes. Pages
+-- and products had no equivalent column, so "go live on Tuesday" was impossible
+-- for them. This adds the same column with the same semantics.
+--
+-- Visibility is derived from the (status, published_at) PAIR — no new enum value:
+--
+--   status = draft/archived                      -> not public, whatever the date
+--   status = published|active, published_at NULL -> public now
+--   status = published|active, date <= now()     -> public now
+--   status = published|active, date >  now()     -> SCHEDULED (withheld)
+--
+-- Deriving "scheduled" instead of storing it keeps \`page_status\` unchanged (adding
+-- an enum value can't be done inside a transaction with other DDL in Postgres) and
+-- matches what posts have always done, so one code path covers all three types.
+--
+-- NULL is the safe default: every existing published row keeps rendering exactly as
+-- before, so this migration needs no backfill and changes no current behavior.
+--
+-- Forward-only and idempotent.
+
+ALTER TABLE public.pages
+    ADD COLUMN IF NOT EXISTS published_at timestamp with time zone;
+
+COMMENT ON COLUMN public.pages.published_at IS
+    'Optional go-live moment. NULL = live as soon as status is published. A future value withholds the page from public reads until it passes (status stays "published"; the CMS renders that pair as "Scheduled").';
+
+ALTER TABLE public.products
+    ADD COLUMN IF NOT EXISTS published_at timestamp with time zone;
+
+COMMENT ON COLUMN public.products.published_at IS
+    'Optional go-live moment. NULL = live as soon as status is active. A future value withholds the product from public reads until it passes (status stays "active"; the CMS renders that pair as "Scheduled").';
+
+-- Public listing/index queries filter on the (status, published_at) pair together
+-- (catalog, sitemap, page lookups), so a composite index serves them in one pass.
+CREATE INDEX IF NOT EXISTS pages_status_published_at_idx
+    ON public.pages (status, published_at);
+
+CREATE INDEX IF NOT EXISTS products_status_published_at_idx
+    ON public.products (status, published_at);
+
+
+-- >>> FROM: 00000000000016_product_revisions_and_revision_baseline.sql <<<
+-- 00000000000016_product_revisions_and_revision_baseline.sql
+--
+-- Revision History, part 1 of 2 (schema). The application-side rewrite lives in
+-- apps/nextblock/app/cms/revisions/**.
+--
+-- Three things happen here:
+--
+--   1. products.version    — the monotonic counter the hybrid revision engine drives,
+--                            mirroring pages.version / posts.version.
+--
+--   2. product_revisions   — a structural mirror of page_revisions / post_revisions.
+--                            product_id is uuid (products.id is uuid, not bigint), and
+--                            writes are gated on is_admin() to match products_*_policy
+--                            rather than the ADMIN|WRITER pattern the page/post revision
+--                            tables use. A WRITER who could insert a revision but not
+--                            apply a restore would get a silent no-op restore, because
+--                            PostgREST returns no error for an UPDATE matching zero rows.
+--
+--   3. Revision baseline   — every page, post and product gets a real \`snapshot\` row to
+--                            restore to. Until now the CMS synthesised a fake "Initial
+--                            Version" entry in the UI whose Restore button resolved to
+--                            "current metadata + zero blocks" and wiped the content.
+--                            There is now an actual stored baseline instead.
+--
+--                            Case A (version = 1, no revisions at all): the live row IS
+--                            version 1. This covers seeded content — 00000000000003
+--                            inserts every page and post at version 1 and writes no
+--                            revision rows — and everything authored since the CMS save
+--                            path stopped recording revisions. Snapshotting it at
+--                            version 1 is what makes "restore the original seeded page"
+--                            real for the first time.
+--
+--                            Case B (version > 1 but no snapshot at or below it): the
+--                            true v1 is unrecoverable and is NOT fabricated. A snapshot
+--                            of the current state is stored at the current version so the
+--                            diff chain has a valid base and future restores resolve.
+--
+-- Forward-only, idempotent, and it modifies no existing row: every backfill is an
+-- INSERT ... WHERE NOT EXISTS ... ON CONFLICT DO NOTHING.
+
+-- ---------------------------------------------------------------------------
+-- 1. products.version
+-- ---------------------------------------------------------------------------
+
+ALTER TABLE public.products
+    ADD COLUMN IF NOT EXISTS version integer DEFAULT 1 NOT NULL;
+
+COMMENT ON COLUMN public.products.version IS 'Monotonic version number for hybrid revisions.';
+
+-- ---------------------------------------------------------------------------
+-- 2. product_revisions
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS public.product_revisions (
+    id bigint NOT NULL,
+    product_id uuid NOT NULL,
+    author_id uuid,
+    version integer NOT NULL,
+    revision_type public.revision_type NOT NULL,
+    content jsonb NOT NULL,
+    created_at timestamp with time zone DEFAULT now() NOT NULL
+);
+
+COMMENT ON TABLE public.product_revisions IS 'Hybrid (snapshot/diff) revisions for products.';
+COMMENT ON COLUMN public.product_revisions.content IS 'If snapshot: full content; if diff: JSON Patch array.';
+
+DO $rb$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_attribute
+     WHERE attrelid = 'public.product_revisions'::regclass
+       AND attname  = 'id'
+       AND attidentity <> ''
+  ) THEN
+    ALTER TABLE public.product_revisions
+      ALTER COLUMN id ADD GENERATED BY DEFAULT AS IDENTITY (
+        SEQUENCE NAME public.product_revisions_id_seq
+        START WITH 1
+        INCREMENT BY 1
+        NO MINVALUE
+        NO MAXVALUE
+        CACHE 1
+      );
+  END IF;
+END $rb$;
+
+DO $rb$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint
+                  WHERE conname = 'product_revisions_pkey'
+                    AND conrelid = 'public.product_revisions'::regclass) THEN
+    ALTER TABLE ONLY public.product_revisions
+      ADD CONSTRAINT product_revisions_pkey PRIMARY KEY (id);
+  END IF;
+END $rb$;
+
+DO $rb$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint
+                  WHERE conname = 'product_revisions_product_version_key'
+                    AND conrelid = 'public.product_revisions'::regclass) THEN
+    ALTER TABLE ONLY public.product_revisions
+      ADD CONSTRAINT product_revisions_product_version_key UNIQUE (product_id, version);
+  END IF;
+END $rb$;
+
+DO $rb$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint
+                  WHERE conname = 'product_revisions_author_id_fkey'
+                    AND conrelid = 'public.product_revisions'::regclass) THEN
+    ALTER TABLE ONLY public.product_revisions
+      ADD CONSTRAINT product_revisions_author_id_fkey
+      FOREIGN KEY (author_id) REFERENCES public.profiles(id) ON DELETE SET NULL;
+  END IF;
+END $rb$;
+
+DO $rb$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint
+                  WHERE conname = 'product_revisions_product_id_fkey'
+                    AND conrelid = 'public.product_revisions'::regclass) THEN
+    ALTER TABLE ONLY public.product_revisions
+      ADD CONSTRAINT product_revisions_product_id_fkey
+      FOREIGN KEY (product_id) REFERENCES public.products(id) ON DELETE CASCADE;
+  END IF;
+END $rb$;
+
+CREATE INDEX IF NOT EXISTS idx_product_revisions_author_id
+    ON public.product_revisions USING btree (author_id);
+
+CREATE INDEX IF NOT EXISTS idx_product_revisions_product_id_version
+    ON public.product_revisions USING btree (product_id, version);
+
+ALTER TABLE public.product_revisions ENABLE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS product_revisions_read_policy ON public.product_revisions;
+CREATE POLICY product_revisions_read_policy ON public.product_revisions
+  FOR SELECT TO authenticated USING (true);
+
+DROP POLICY IF EXISTS product_revisions_insert_policy ON public.product_revisions;
+CREATE POLICY product_revisions_insert_policy ON public.product_revisions
+  FOR INSERT TO authenticated
+  WITH CHECK (((SELECT public.is_admin() AS is_admin) IS TRUE));
+
+DROP POLICY IF EXISTS product_revisions_update_policy ON public.product_revisions;
+CREATE POLICY product_revisions_update_policy ON public.product_revisions
+  FOR UPDATE TO authenticated
+  USING (((SELECT public.is_admin() AS is_admin) IS TRUE))
+  WITH CHECK (((SELECT public.is_admin() AS is_admin) IS TRUE));
+
+DROP POLICY IF EXISTS product_revisions_delete_policy ON public.product_revisions;
+CREATE POLICY product_revisions_delete_policy ON public.product_revisions
+  FOR DELETE TO authenticated
+  USING (((SELECT public.is_admin() AS is_admin) IS TRUE));
+
+GRANT ALL ON TABLE    public.product_revisions        TO anon;
+GRANT ALL ON TABLE    public.product_revisions        TO authenticated;
+GRANT ALL ON TABLE    public.product_revisions        TO service_role;
+GRANT ALL ON SEQUENCE public.product_revisions_id_seq TO anon;
+GRANT ALL ON SEQUENCE public.product_revisions_id_seq TO authenticated;
+GRANT ALL ON SEQUENCE public.product_revisions_id_seq TO service_role;
+
+-- ---------------------------------------------------------------------------
+-- 3. Revision baseline backfill
+--
+-- The JSON shape must match FullPageContent / FullPostContent / FullProductContent
+-- in apps/nextblock/app/cms/revisions/utils.ts exactly, or the first diff taken
+-- against a baseline row will be full of phantom operations.
+--
+-- Timestamps are rendered with an explicit millisecond-precision UTC format so they
+-- match JavaScript's Date#toISOString() ("2026-07-03T17:52:15.643Z"). Postgres'
+-- default jsonb rendering of timestamptz ("2026-07-03T17:52:15.643901+00:00") would
+-- differ from the value the application writes and produce a spurious diff on the
+-- very next save.
+-- ---------------------------------------------------------------------------
+
+-- 3a. Pages
+INSERT INTO public.page_revisions (page_id, author_id, version, revision_type, content)
+SELECT
+    p.id,
+    NULL::uuid,
+    p.version,
+    'snapshot'::public.revision_type,
+    jsonb_build_object(
+      'meta', jsonb_build_object(
+        'title',            p.title,
+        'slug',             p.slug,
+        'language_id',      p.language_id,
+        'status',           p.status,
+        'meta_title',       p.meta_title,
+        'meta_description', p.meta_description,
+        'custom_canonical', p.custom_canonical,
+        'published_at',     to_char(p.published_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'),
+        'feature_image_id', p.feature_image_id
+      ),
+      'blocks', COALESCE((
+        SELECT jsonb_agg(
+                 jsonb_build_object(
+                   'language_id', b.language_id,
+                   'block_type',  b.block_type,
+                   'content',     b.content,
+                   'order',       b."order"
+                 ) ORDER BY b."order" ASC, b.id ASC
+               )
+          FROM public.blocks b
+         WHERE b.page_id = p.id
+      ), '[]'::jsonb)
+    )
+  FROM public.pages p
+ WHERE NOT EXISTS (
+         SELECT 1 FROM public.page_revisions r
+          WHERE r.page_id = p.id
+            AND r.revision_type = 'snapshot'
+            AND r.version <= p.version
+       )
+ON CONFLICT (page_id, version) DO NOTHING;
+
+-- 3b. Posts
+INSERT INTO public.post_revisions (post_id, author_id, version, revision_type, content)
+SELECT
+    po.id,
+    NULL::uuid,
+    po.version,
+    'snapshot'::public.revision_type,
+    jsonb_build_object(
+      'meta', jsonb_build_object(
+        'title',            po.title,
+        'slug',             po.slug,
+        'language_id',      po.language_id,
+        'status',           po.status,
+        'meta_title',       po.meta_title,
+        'meta_description', po.meta_description,
+        'custom_canonical', po.custom_canonical,
+        'published_at',     to_char(po.published_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'),
+        'feature_image_id', po.feature_image_id,
+        'label',            po.label,
+        'excerpt',          po.excerpt,
+        'subtitle',         po.subtitle
+      ),
+      'blocks', COALESCE((
+        SELECT jsonb_agg(
+                 jsonb_build_object(
+                   'language_id', b.language_id,
+                   'block_type',  b.block_type,
+                   'content',     b.content,
+                   'order',       b."order"
+                 ) ORDER BY b."order" ASC, b.id ASC
+               )
+          FROM public.blocks b
+         WHERE b.post_id = po.id
+      ), '[]'::jsonb)
+    )
+  FROM public.posts po
+ WHERE NOT EXISTS (
+         SELECT 1 FROM public.post_revisions r
+          WHERE r.post_id = po.id
+            AND r.revision_type = 'snapshot'
+            AND r.version <= po.version
+       )
+ON CONFLICT (post_id, version) DO NOTHING;
+
+-- 3c. Products.
+--
+-- Content only. price/prices/sale_*/scheduled_*/stock/sku/average_rating/total_reviews
+-- are deliberately excluded from the snapshot: pricing and inventory are mutated from
+-- outside the editor (promotions, Freemius sync, order fulfilment), ratings are derived
+-- aggregates, and inventory_items is keyed by bare SKU text with no FK to products — so
+-- replaying commerce state on restore would reach rows the editor never touched.
+-- Restoring a product restores its content, not its commerce state.
+INSERT INTO public.product_revisions (product_id, author_id, version, revision_type, content)
+SELECT
+    pr.id,
+    NULL::uuid,
+    pr.version,
+    'snapshot'::public.revision_type,
+    jsonb_build_object(
+      'meta', jsonb_build_object(
+        'title',             pr.title,
+        'slug',              pr.slug,
+        'language_id',       pr.language_id,
+        'status',            pr.status,
+        'meta_title',        pr.meta_title,
+        'meta_description',  pr.meta_description,
+        'custom_canonical',  pr.custom_canonical,
+        'published_at',      to_char(pr.published_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'),
+        'short_description', pr.short_description,
+        'description_json',  pr.description_json
+      ),
+      'blocks', COALESCE((
+        SELECT jsonb_agg(
+                 jsonb_build_object(
+                   'language_id', b.language_id,
+                   'block_type',  b.block_type,
+                   'content',     b.content,
+                   'order',       b."order"
+                 ) ORDER BY b."order" ASC, b.id ASC
+               )
+          FROM public.blocks b
+         WHERE b.product_id = pr.id
+      ), '[]'::jsonb)
+    )
+  FROM public.products pr
+ WHERE NOT EXISTS (
+         SELECT 1 FROM public.product_revisions r
+          WHERE r.product_id = pr.id
+            AND r.revision_type = 'snapshot'
+            AND r.version <= pr.version
+       )
+ON CONFLICT (product_id, version) DO NOTHING;
+
+
   -- Step D: Record the applied migrations in history (truncated in Step B) so
   -- \`npm run db:migrate:check\` reports up to date instead of listing every file as pending.
   INSERT INTO supabase_migrations.schema_migrations (version, name) VALUES
@@ -6171,7 +6530,9 @@ ON CONFLICT (slug) DO NOTHING;
     ('00000000000011', 'language_detection_admin_only'),
     ('00000000000012', 'cortex_ai_stock_photo_settings'),
     ('00000000000013', 'youtube_nocookie_embeds'),
-    ('00000000000014', 'site_themes')
+    ('00000000000014', 'site_themes'),
+    ('00000000000015', 'scheduled_publishing'),
+    ('00000000000016', 'product_revisions_and_revision_baseline')
   ON CONFLICT (version) DO NOTHING;
 
   -- Step E: Anchor preserved profiles

package/templates/nextblock-template/app/api/view/route.ts

@@ -0,0 +1,114 @@
+import { draftMode } from "next/headers";
+import { NextRequest, NextResponse } from "next/server";
+import { getCurrentUserCanEdit } from "../../../lib/visual-editing/draft-content";
+import {
+  normalizeDraftRedirectPath,
+  resolveDraftPathTarget,
+  resolveRequestOrigin,
+} from "../../../lib/visual-editing/draft-route";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+/**
+ * Entry point behind the CMS "Preview" and "View Live" buttons.
+ *
+ * The public site carries no locale in its URLs: `/[slug]`, `/article/[slug]`,
+ * `/product/[slug]` and `/` all resolve their language per-request from the
+ * `NEXT_USER_LOCALE` cookie (see proxy.ts). A link built from the slug alone
+ * therefore renders in whatever language the *editor's own* cookie says — which,
+ * for an admin working in the CMS, is almost always the default one. Opening the
+ * French version of a page landed you on the English one, three different ways:
+ *
+ *   1. `getPageDataBySlug(slug, cookieLocale)` prefers the row matching the
+ *      cookie, so when two translations share a slug the cookie's language wins.
+ *   2. `PageClientContent` / `PostClientContent` navigate to
+ *      `translatedSlugs[currentLocale]` whenever the rendered row's language
+ *      differs from the cookie — bouncing distinct French slugs back to English.
+ *   3. `/` (the homepage) resolves its language from the cookie with no slug to
+ *      go on at all, so the French homepage was unreachable by URL.
+ *
+ * Pinning the locale here fixes all three at once, because after the redirect the
+ * cookie *agrees* with the content: the server picks the right row, the client
+ * effect is a no-op, and the surrounding chrome (nav, footer, UI strings) renders
+ * in the same language as the body — so the preview isn't lying about the page.
+ *
+ * The alternative, a `?lang=` param read by each route, would leave a second
+ * cacheable variant of every public URL behind and can leak into shares and
+ * search indexes as duplicate content. The redirect lands on the clean canonical
+ * URL instead, and the param never reaches the public route.
+ */
+
+const LANGUAGE_COOKIE_KEY = "NEXT_USER_LOCALE";
+
+function redirectNoStore(url: URL) {
+  const response = NextResponse.redirect(url);
+  response.headers.set("Cache-Control", "no-store");
+  return response;
+}
+
+function redirectToSignIn(request: NextRequest, search: string) {
+  const origin = resolveRequestOrigin(request);
+  const signInUrl = new URL("/sign-in", origin);
+  signInUrl.searchParams.set("redirect", `${request.nextUrl.pathname}${search}`);
+  return redirectNoStore(signInUrl);
+}
+
+export async function GET(request: NextRequest) {
+  const params = request.nextUrl.searchParams;
+  const normalizedPath = normalizeDraftRedirectPath(params.get("path") ?? "/");
+
+  if (!normalizedPath) {
+    return NextResponse.json({ error: "Invalid path." }, { status: 400 });
+  }
+
+  const target = resolveDraftPathTarget(normalizedPath);
+  if (!target) {
+    return NextResponse.json({ error: "Unsupported target path." }, { status: 400 });
+  }
+
+  const wantsDraft = params.get("draft") === "1";
+
+  const auth = await getCurrentUserCanEdit();
+  if (!auth.user) {
+    return redirectToSignIn(request, request.nextUrl.search);
+  }
+  if (!auth.canEdit) {
+    return NextResponse.json(
+      { error: "You do not have permission to preview content." },
+      { status: 403 },
+    );
+  }
+
+  // Only ever write a language the CMS actually has configured — the value lands
+  // in a cookie every public request reads, so it must not be attacker-supplied.
+  let locale: string | null = null;
+  const requestedLang = params.get("lang")?.trim();
+  if (requestedLang) {
+    const { data: language } = await (auth.supabase as any)
+      .from("languages")
+      .select("code")
+      .eq("code", requestedLang)
+      .maybeSingle();
+    locale = (language as { code?: string } | null)?.code ?? null;
+  }
+
+  if (wantsDraft) {
+    const draft = await draftMode();
+    draft.enable();
+  }
+
+  const response = redirectNoStore(new URL(target.path, resolveRequestOrigin(request)));
+
+  if (locale) {
+    // Session-scoped on purpose: previewing French shouldn't pin the editor's own
+    // browsing language for a year. The proxy leaves a matching cookie alone, so
+    // this survives the preview and expires with the browser session.
+    response.cookies.set(LANGUAGE_COOKIE_KEY, locale, {
+      path: "/",
+      sameSite: "lax",
+    });
+  }
+
+  return response;
+}

package/templates/nextblock-template/app/article/[slug]/page.utils.ts

@@ -84,14 +84,13 @@ function applyDraftToPost(post: any, draft: ContentDraftRow) {
     slug: draftString(draft, "slug", post.slug),
     language_id: languageId,
     languages: languageId === post.language_id ? post.languages : null,
-    status: draftString(draft, "status", post.status) as PostType["status"],
+    // Visibility is never taken from a draft — it lives on the row.
     meta_title: draftNullableString(draft, "meta_title", post.meta_title),
     meta_description: draftNullableString(draft, "meta_description", post.meta_description),
     custom_canonical: draftNullableString(draft, "custom_canonical", post.custom_canonical),
     label: draftNullableString(draft, "label", post.label),
     excerpt: draftNullableString(draft, "excerpt", post.excerpt),
     subtitle: draftNullableString(draft, "subtitle", post.subtitle),
-    published_at: draftNullableString(draft, "published_at", post.published_at),
     feature_image_id: draftNullableString(draft, "feature_image_id", post.feature_image_id),
     translation_group_id: draftString(
       draft,

package/templates/nextblock-template/app/cms/components/DraftStatusActions.tsx

@@ -45,8 +45,18 @@ export default function DraftStatusActions({
         );
       }
 
+      const warning = res && "success" in res ? res.warning : undefined;
+
       if (res && "error" in res && res.error) {
         toast.error(`Publish failed: ${res.error}`, { id: toastId });
+      } else if (warning) {
+        // The content IS live — only the revision failed to record. Say so plainly
+        // rather than claiming an unqualified success.
+        toast.error(warning, { id: toastId, duration: 8000 });
+        router.refresh();
+        setTimeout(() => {
+          window.location.reload();
+        }, 800);
       } else {
         toast.success("Changes published live successfully!", { id: toastId });
         router.refresh();

package/templates/nextblock-template/app/cms/components/VisibilityBadge.tsx

@@ -0,0 +1,62 @@
+import { Badge } from "@nextblock-cms/ui";
+import {
+  LIVE_STATUS,
+  resolveVisibilityState,
+  type PublishableType,
+  type VisibilityState,
+} from "@nextblock-cms/utils";
+
+/**
+ * Status badge for the CMS list views.
+ *
+ * Reads the same (status, published_at) pair as the editor's top-bar control, so a
+ * scheduled row is labelled "Scheduled" here instead of claiming to be published
+ * while its URL still 404s.
+ */
+
+const LABEL: Record<VisibilityState, string> = {
+  draft: "Draft",
+  scheduled: "Scheduled",
+  published: "Published",
+  archived: "Archived",
+};
+
+const CLASS_NAME: Record<VisibilityState, string> = {
+  published:
+    "bg-green-100 text-green-700 dark:bg-green-700/30 dark:text-green-300 dark:border-green-700/50",
+  scheduled:
+    "bg-amber-100 text-amber-700 dark:bg-amber-700/30 dark:text-amber-300 dark:border-amber-700/50",
+  draft:
+    "bg-yellow-100 text-yellow-700 dark:bg-yellow-700/30 dark:text-yellow-300 dark:border-yellow-700/50",
+  archived:
+    "bg-slate-100 text-slate-700 dark:bg-slate-700/30 dark:text-slate-300 dark:border-slate-600",
+};
+
+const VARIANT: Record<VisibilityState, "default" | "secondary" | "destructive"> = {
+  published: "default",
+  scheduled: "secondary",
+  draft: "secondary",
+  archived: "destructive",
+};
+
+export default function VisibilityBadge({
+  type,
+  status,
+  publishedAt,
+}: {
+  type: PublishableType;
+  status: string;
+  publishedAt?: string | null;
+}) {
+  const state = resolveVisibilityState({
+    status,
+    publishedAt,
+    liveStatus: LIVE_STATUS[type],
+  });
+
+  return (
+    <Badge variant={VARIANT[state]} className={CLASS_NAME[state]}>
+      {LABEL[state]}
+    </Badge>
+  );
+}