create-nextblock 0.16.1 → 0.16.2

package/templates/nextblock-template/app/thread/page.tsx

@@ -1,98 +1,98 @@
-import { headers } from 'next/headers';
-import { getServiceRoleSupabaseClient } from '@nextblock-cms/db/server';
-
-import { getCookieValue } from '../../lib/auth/cookies';
-import {
-  THREAD_COOKIE,
-  touchThreadToken,
-  verifyThreadToken,
-} from '../../lib/messages/thread-token';
-import ThreadView, { type ThreadMessage } from './ThreadView';
-
-// A conversation changes whenever either side writes; a cached copy would show the
-// visitor a reply that is no longer the latest, or hide one that just arrived.
-export const dynamic = 'force-dynamic';
-export const fetchCache = 'force-no-store';
-
-const MAX_MESSAGES = 200;
-
-/**
- * The visitor's half of a private conversation.
- *
- * Authentication is the HttpOnly cookie set by `/thread/[token]`, verified here in
- * application code and then read with the service role — no RLS policy in this schema
- * authenticates an anonymous caller by token, and this page does not invent one.
- *
- * There is exactly one failure page. A visitor whose link expired, was revoked, or never
- * existed sees the same words, because anything else would let someone probe for valid
- * threads.
- */
-export default async function ThreadPage() {
-  const supabase = getServiceRoleSupabaseClient();
-  const token = await getCookieValue(THREAD_COOKIE);
-  const check = await verifyThreadToken(supabase, token);
-
-  if (!check.valid) {
-    return <ThreadView invalid />;
-  }
-
-  const thread = check.thread;
-
-  const [{ data: rows }, botProtection, scriptNonce] = await Promise.all([
-    supabase
-      .from('thread_messages')
-      .select('id, direction, body, author_name, created_at')
-      .eq('thread_id', thread.id)
-      .order('created_at', { ascending: true })
-      .limit(MAX_MESSAGES),
-    loadBotProtection(supabase),
-    loadNonce(),
-  ]);
-
-  // The visitor is looking at it, so it is no longer unread for them.
-  if (thread.unread_for_visitor) {
-    await supabase
-      .from('message_threads')
-      .update({ unread_for_visitor: false })
-      .eq('id', thread.id);
-  }
-  await touchThreadToken(supabase, thread.id);
-
-  return (
-    <ThreadView
-      subjectLabel={thread.subject_label}
-      closed={thread.status === 'closed'}
-      messages={(rows ?? []) as ThreadMessage[]}
-      botProtectionProvider={botProtection.provider}
-      botProtectionSiteKey={botProtection.siteKey}
-      scriptNonce={scriptNonce}
-    />
-  );
-}
-
-async function loadBotProtection(supabase: {
-  from: (table: string) => any;
-}): Promise<{ provider: 'none' | 'turnstile' | 'recaptcha'; siteKey: string }> {
-  try {
-    const { data } = await supabase
-      .from('site_settings')
-      .select('value')
-      .eq('key', 'bot_protection_public')
-      .maybeSingle();
-    if (data?.value) {
-      const value = data.value as Record<string, any>;
-      return { provider: value.provider || 'none', siteKey: value.siteKey || '' };
-    }
-  } catch (error) {
-    console.error('[thread] Could not load bot protection settings:', error);
-  }
-  return { provider: 'none', siteKey: '' };
-}
-
-async function loadNonce(): Promise<string> {
-  try {
-    return (await headers()).get('x-nonce') || '';
-  } catch {
-    return '';
-  }
-}
+import { headers } from 'next/headers';
+import { getServiceRoleSupabaseClient } from '@nextblock-cms/db/server';
+
+import { getCookieValue } from '../../lib/auth/cookies';
+import {
+  THREAD_COOKIE,
+  touchThreadToken,
+  verifyThreadToken,
+} from '../../lib/messages/thread-token';
+import ThreadView, { type ThreadMessage } from './ThreadView';
+
+// A conversation changes whenever either side writes; a cached copy would show the
+// visitor a reply that is no longer the latest, or hide one that just arrived.
+export const dynamic = 'force-dynamic';
+export const fetchCache = 'force-no-store';
+
+const MAX_MESSAGES = 200;
+
+/**
+ * The visitor's half of a private conversation.
+ *
+ * Authentication is the HttpOnly cookie set by `/thread/[token]`, verified here in
+ * application code and then read with the service role — no RLS policy in this schema
+ * authenticates an anonymous caller by token, and this page does not invent one.
+ *
+ * There is exactly one failure page. A visitor whose link expired, was revoked, or never
+ * existed sees the same words, because anything else would let someone probe for valid
+ * threads.
+ */
+export default async function ThreadPage() {
+  const supabase = getServiceRoleSupabaseClient();
+  const token = await getCookieValue(THREAD_COOKIE);
+  const check = await verifyThreadToken(supabase, token);
+
+  if (!check.valid) {
+    return <ThreadView invalid />;
+  }
+
+  const thread = check.thread;
+
+  const [{ data: rows }, botProtection, scriptNonce] = await Promise.all([
+    supabase
+      .from('thread_messages')
+      .select('id, direction, body, author_name, created_at')
+      .eq('thread_id', thread.id)
+      .order('created_at', { ascending: true })
+      .limit(MAX_MESSAGES),
+    loadBotProtection(supabase),
+    loadNonce(),
+  ]);
+
+  // The visitor is looking at it, so it is no longer unread for them.
+  if (thread.unread_for_visitor) {
+    await supabase
+      .from('message_threads')
+      .update({ unread_for_visitor: false })
+      .eq('id', thread.id);
+  }
+  await touchThreadToken(supabase, thread.id);
+
+  return (
+    <ThreadView
+      subjectLabel={thread.subject_label}
+      closed={thread.status === 'closed'}
+      messages={(rows ?? []) as ThreadMessage[]}
+      botProtectionProvider={botProtection.provider}
+      botProtectionSiteKey={botProtection.siteKey}
+      scriptNonce={scriptNonce}
+    />
+  );
+}
+
+async function loadBotProtection(supabase: {
+  from: (table: string) => any;
+}): Promise<{ provider: 'none' | 'turnstile' | 'recaptcha'; siteKey: string }> {
+  try {
+    const { data } = await supabase
+      .from('site_settings')
+      .select('value')
+      .eq('key', 'bot_protection_public')
+      .maybeSingle();
+    if (data?.value) {
+      const value = data.value as Record<string, any>;
+      return { provider: value.provider || 'none', siteKey: value.siteKey || '' };
+    }
+  } catch (error) {
+    console.error('[thread] Could not load bot protection settings:', error);
+  }
+  return { provider: 'none', siteKey: '' };
+}
+
+async function loadNonce(): Promise<string> {
+  try {
+    return (await headers()).get('x-nonce') || '';
+  } catch {
+    return '';
+  }
+}

package/templates/nextblock-template/app/ucp/v1/carts/[id]/cancel/route.ts

@@ -1,38 +1,38 @@
-import { NextResponse } from 'next/server';
-import {
-  buildProtocolError,
-  cancelUcpCart,
-  ensureEcommerceOnline,
-} from '../../../../../lib/ucp/server';
-
-export const dynamic = 'force-dynamic';
-export const runtime = 'nodejs';
-
-interface CartCancelRouteContext {
-  params: Promise<{ id: string }>;
-}
-
-export async function POST(request: Request, context: CartCancelRouteContext) {
-  try {
-    const isOnline = await ensureEcommerceOnline();
-    if (!isOnline) {
-      return NextResponse.json(
-        buildProtocolError(
-          'ecommerce_unavailable',
-          'Ecommerce module license is inactive.'
-        ),
-        { status: 403 }
-      );
-    }
-
-    const { id } = await context.params;
-    const result = await cancelUcpCart(id, request);
-    return NextResponse.json(result.body, { status: result.status });
-  } catch (error) {
-    console.error('UCP cancel cart error:', error);
-    return NextResponse.json(
-      buildProtocolError('internal_server_error', 'Cart cancellation failed.'),
-      { status: 500 }
-    );
-  }
-}
+import { NextResponse } from 'next/server';
+import {
+  buildProtocolError,
+  cancelUcpCart,
+  ensureEcommerceOnline,
+} from '../../../../../lib/ucp/server';
+
+export const dynamic = 'force-dynamic';
+export const runtime = 'nodejs';
+
+interface CartCancelRouteContext {
+  params: Promise<{ id: string }>;
+}
+
+export async function POST(request: Request, context: CartCancelRouteContext) {
+  try {
+    const isOnline = await ensureEcommerceOnline();
+    if (!isOnline) {
+      return NextResponse.json(
+        buildProtocolError(
+          'ecommerce_unavailable',
+          'Ecommerce module license is inactive.'
+        ),
+        { status: 403 }
+      );
+    }
+
+    const { id } = await context.params;
+    const result = await cancelUcpCart(id, request);
+    return NextResponse.json(result.body, { status: result.status });
+  } catch (error) {
+    console.error('UCP cancel cart error:', error);
+    return NextResponse.json(
+      buildProtocolError('internal_server_error', 'Cart cancellation failed.'),
+      { status: 500 }
+    );
+  }
+}

package/templates/nextblock-template/app/ucp/v1/carts/[id]/route.ts

@@ -1,68 +1,68 @@
-import { NextResponse } from 'next/server';
-import {
-  buildProtocolError,
-  ensureEcommerceOnline,
-  getUcpCart,
-  parseJsonBody,
-  updateUcpCart,
-} from '../../../../lib/ucp/server';
-
-export const dynamic = 'force-dynamic';
-export const runtime = 'nodejs';
-
-interface CartRouteContext {
-  params: Promise<{ id: string }>;
-}
-
-export async function GET(request: Request, context: CartRouteContext) {
-  try {
-    const isOnline = await ensureEcommerceOnline();
-    if (!isOnline) {
-      return NextResponse.json(
-        buildProtocolError(
-          'ecommerce_unavailable',
-          'Ecommerce module license is inactive.'
-        ),
-        { status: 403 }
-      );
-    }
-
-    const { id } = await context.params;
-    const result = await getUcpCart(id, request);
-    return NextResponse.json(result.body, { status: result.status });
-  } catch (error) {
-    console.error('UCP get cart error:', error);
-    return NextResponse.json(
-      buildProtocolError('internal_server_error', 'Cart retrieval failed.'),
-      { status: 500 }
-    );
-  }
-}
-
-export async function PUT(request: Request, context: CartRouteContext) {
-  try {
-    const isOnline = await ensureEcommerceOnline();
-    if (!isOnline) {
-      return NextResponse.json(
-        buildProtocolError(
-          'ecommerce_unavailable',
-          'Ecommerce module license is inactive.'
-        ),
-        { status: 403 }
-      );
-    }
-
-    const { id } = await context.params;
-    const body = await parseJsonBody(request);
-    const result = await updateUcpCart(id, body, request);
-    return NextResponse.json(result.body, { status: result.status });
-  } catch (error) {
-    console.error('UCP update cart error:', error);
-    return NextResponse.json(
-      buildProtocolError('internal_server_error', 'Cart update failed.'),
-      { status: 500 }
-    );
-  }
-}
-
-export const PATCH = PUT;
+import { NextResponse } from 'next/server';
+import {
+  buildProtocolError,
+  ensureEcommerceOnline,
+  getUcpCart,
+  parseJsonBody,
+  updateUcpCart,
+} from '../../../../lib/ucp/server';
+
+export const dynamic = 'force-dynamic';
+export const runtime = 'nodejs';
+
+interface CartRouteContext {
+  params: Promise<{ id: string }>;
+}
+
+export async function GET(request: Request, context: CartRouteContext) {
+  try {
+    const isOnline = await ensureEcommerceOnline();
+    if (!isOnline) {
+      return NextResponse.json(
+        buildProtocolError(
+          'ecommerce_unavailable',
+          'Ecommerce module license is inactive.'
+        ),
+        { status: 403 }
+      );
+    }
+
+    const { id } = await context.params;
+    const result = await getUcpCart(id, request);
+    return NextResponse.json(result.body, { status: result.status });
+  } catch (error) {
+    console.error('UCP get cart error:', error);
+    return NextResponse.json(
+      buildProtocolError('internal_server_error', 'Cart retrieval failed.'),
+      { status: 500 }
+    );
+  }
+}
+
+export async function PUT(request: Request, context: CartRouteContext) {
+  try {
+    const isOnline = await ensureEcommerceOnline();
+    if (!isOnline) {
+      return NextResponse.json(
+        buildProtocolError(
+          'ecommerce_unavailable',
+          'Ecommerce module license is inactive.'
+        ),
+        { status: 403 }
+      );
+    }
+
+    const { id } = await context.params;
+    const body = await parseJsonBody(request);
+    const result = await updateUcpCart(id, body, request);
+    return NextResponse.json(result.body, { status: result.status });
+  } catch (error) {
+    console.error('UCP update cart error:', error);
+    return NextResponse.json(
+      buildProtocolError('internal_server_error', 'Cart update failed.'),
+      { status: 500 }
+    );
+  }
+}
+
+export const PATCH = PUT;

package/templates/nextblock-template/app/ucp/v1/carts/route.ts

@@ -1,35 +1,35 @@
-import { NextResponse } from 'next/server';
-import {
-  buildProtocolError,
-  createUcpCart,
-  ensureEcommerceOnline,
-  parseJsonBody,
-} from '../../../lib/ucp/server';
-
-export const dynamic = 'force-dynamic';
-export const runtime = 'nodejs';
-
-export async function POST(request: Request) {
-  try {
-    const isOnline = await ensureEcommerceOnline();
-    if (!isOnline) {
-      return NextResponse.json(
-        buildProtocolError(
-          'ecommerce_unavailable',
-          'Ecommerce module license is inactive.'
-        ),
-        { status: 403 }
-      );
-    }
-
-    const body = await parseJsonBody(request);
-    const result = await createUcpCart(body, request);
-    return NextResponse.json(result.body, { status: result.status });
-  } catch (error) {
-    console.error('UCP create cart error:', error);
-    return NextResponse.json(
-      buildProtocolError('internal_server_error', 'Cart creation failed.'),
-      { status: 500 }
-    );
-  }
-}
+import { NextResponse } from 'next/server';
+import {
+  buildProtocolError,
+  createUcpCart,
+  ensureEcommerceOnline,
+  parseJsonBody,
+} from '../../../lib/ucp/server';
+
+export const dynamic = 'force-dynamic';
+export const runtime = 'nodejs';
+
+export async function POST(request: Request) {
+  try {
+    const isOnline = await ensureEcommerceOnline();
+    if (!isOnline) {
+      return NextResponse.json(
+        buildProtocolError(
+          'ecommerce_unavailable',
+          'Ecommerce module license is inactive.'
+        ),
+        { status: 403 }
+      );
+    }
+
+    const body = await parseJsonBody(request);
+    const result = await createUcpCart(body, request);
+    return NextResponse.json(result.body, { status: result.status });
+  } catch (error) {
+    console.error('UCP create cart error:', error);
+    return NextResponse.json(
+      buildProtocolError('internal_server_error', 'Cart creation failed.'),
+      { status: 500 }
+    );
+  }
+}

package/templates/nextblock-template/app/ucp/v1/catalog/lookup/route.ts

@@ -1,35 +1,35 @@
-import { NextResponse } from 'next/server';
-import {
-  buildProtocolError,
-  ensureEcommerceOnline,
-  lookupCatalogProducts,
-  parseJsonBody,
-} from '../../../../lib/ucp/server';
-
-export const dynamic = 'force-dynamic';
-export const runtime = 'nodejs';
-
-export async function POST(request: Request) {
-  try {
-    const isOnline = await ensureEcommerceOnline();
-    if (!isOnline) {
-      return NextResponse.json(
-        buildProtocolError(
-          'ecommerce_unavailable',
-          'Ecommerce module license is inactive.'
-        ),
-        { status: 403 }
-      );
-    }
-
-    const body = await parseJsonBody(request);
-    const result = await lookupCatalogProducts(body, request);
-    return NextResponse.json(result.body, { status: result.status });
-  } catch (error) {
-    console.error('UCP catalog lookup error:', error);
-    return NextResponse.json(
-      buildProtocolError('internal_server_error', 'Catalog lookup failed.'),
-      { status: 500 }
-    );
-  }
-}
+import { NextResponse } from 'next/server';
+import {
+  buildProtocolError,
+  ensureEcommerceOnline,
+  lookupCatalogProducts,
+  parseJsonBody,
+} from '../../../../lib/ucp/server';
+
+export const dynamic = 'force-dynamic';
+export const runtime = 'nodejs';
+
+export async function POST(request: Request) {
+  try {
+    const isOnline = await ensureEcommerceOnline();
+    if (!isOnline) {
+      return NextResponse.json(
+        buildProtocolError(
+          'ecommerce_unavailable',
+          'Ecommerce module license is inactive.'
+        ),
+        { status: 403 }
+      );
+    }
+
+    const body = await parseJsonBody(request);
+    const result = await lookupCatalogProducts(body, request);
+    return NextResponse.json(result.body, { status: result.status });
+  } catch (error) {
+    console.error('UCP catalog lookup error:', error);
+    return NextResponse.json(
+      buildProtocolError('internal_server_error', 'Catalog lookup failed.'),
+      { status: 500 }
+    );
+  }
+}

package/templates/nextblock-template/app/ucp/v1/catalog/product/route.ts

@@ -1,35 +1,35 @@
-import { NextResponse } from 'next/server';
-import {
-  buildProtocolError,
-  ensureEcommerceOnline,
-  getCatalogProduct,
-  parseJsonBody,
-} from '../../../../lib/ucp/server';
-
-export const dynamic = 'force-dynamic';
-export const runtime = 'nodejs';
-
-export async function POST(request: Request) {
-  try {
-    const isOnline = await ensureEcommerceOnline();
-    if (!isOnline) {
-      return NextResponse.json(
-        buildProtocolError(
-          'ecommerce_unavailable',
-          'Ecommerce module license is inactive.'
-        ),
-        { status: 403 }
-      );
-    }
-
-    const body = await parseJsonBody(request);
-    const result = await getCatalogProduct(body, request);
-    return NextResponse.json(result.body, { status: result.status });
-  } catch (error) {
-    console.error('UCP catalog product error:', error);
-    return NextResponse.json(
-      buildProtocolError('internal_server_error', 'Catalog product lookup failed.'),
-      { status: 500 }
-    );
-  }
-}
+import { NextResponse } from 'next/server';
+import {
+  buildProtocolError,
+  ensureEcommerceOnline,
+  getCatalogProduct,
+  parseJsonBody,
+} from '../../../../lib/ucp/server';
+
+export const dynamic = 'force-dynamic';
+export const runtime = 'nodejs';
+
+export async function POST(request: Request) {
+  try {
+    const isOnline = await ensureEcommerceOnline();
+    if (!isOnline) {
+      return NextResponse.json(
+        buildProtocolError(
+          'ecommerce_unavailable',
+          'Ecommerce module license is inactive.'
+        ),
+        { status: 403 }
+      );
+    }
+
+    const body = await parseJsonBody(request);
+    const result = await getCatalogProduct(body, request);
+    return NextResponse.json(result.body, { status: result.status });
+  } catch (error) {
+    console.error('UCP catalog product error:', error);
+    return NextResponse.json(
+      buildProtocolError('internal_server_error', 'Catalog product lookup failed.'),
+      { status: 500 }
+    );
+  }
+}