create-nextblock 0.16.1 → 0.16.3

package/templates/nextblock-template/app/api/ai/seo/metadata/route.ts

@@ -1,186 +1,186 @@
-import { NextResponse } from 'next/server';
-
-import { createClient, verifyPackageOnline } from '@nextblock-cms/db/server';
-
-import { generateCortexAiSeoMetadata } from '@nextblock-cms/cortex';
-import {
-  safeParseCortexAiModelSelection,
-  summarizeCortexAiRoutingError,
-} from '@nextblock-cms/cortex';
-
-import { z } from '../../../../../lib/zod-config';
-
-export const dynamic = 'force-dynamic';
-
-type SupabaseServerClient = ReturnType<typeof createClient>;
-
-/**
- * How much page copy this endpoint will accept in one request.
- *
- * The engine truncates the content to `CORTEX_AI_SEO_METADATA_CONTENT_BUDGET`
- * (6000 characters) before it ever reaches a model, so anything beyond that is
- * discarded rather than summarised. This ceiling is therefore not a content rule —
- * it is a request-body bound, set far above the engine's budget so that a genuinely
- * long post is never rejected with a confusing 400, but low enough that a runaway
- * client cannot push megabytes of HTML through the JSON parser on every keystroke
- * of an editor that generates metadata as you type.
- */
-const SEO_METADATA_CONTENT_REQUEST_LIMIT = 200_000;
-
-/**
- * The request contract for the metadata endpoint.
- *
- * Strict, for the reason every Cortex request schema is strict: an unrecognised key
- * means the caller and this route disagree about the contract, and the failure mode
- * of quietly dropping it is a generation that ignored the focus keyword or the
- * locale the caller thought it had supplied. A 400 naming the mismatch is far
- * cheaper to debug than metadata that is merely subtly wrong.
- *
- * Only `content` is required. Everything else is a hint the engine folds into the
- * prompt when present and omits entirely when absent, which is why each optional
- * field is bounded but never given a minimum beyond one character — an empty string
- * from a form field that the user left blank should not fail the whole request, and
- * the engine's own `?.trim() || null` normalisation already treats blank as absent.
- */
-const seoMetadataRequestSchema = z.strictObject({
-  content: z.string().min(1).max(SEO_METADATA_CONTENT_REQUEST_LIMIT),
-  focusKeyword: z.string().max(200).optional(),
-  locale: z.string().max(64).optional(),
-  siteTitle: z.string().max(200).optional(),
-  title: z.string().max(500).optional(),
-});
-
-async function requireCmsWriterAccess(supabase: SupabaseServerClient) {
-  const {
-    data: { user },
-    error: userError,
-  } = await supabase.auth.getUser();
-
-  if (userError || !user) {
-    return null;
-  }
-
-  const { data: profile, error: profileError } = await supabase
-    .from('profiles')
-    .select('role')
-    .eq('id', user.id)
-    .single();
-
-  if (profileError || !profile || !['ADMIN', 'WRITER'].includes(profile.role)) {
-    return null;
-  }
-
-  return { userId: user.id };
-}
-
-function jsonError(message: string, status: number) {
-  return NextResponse.json({ error: message }, { status });
-}
-
-export async function POST(request: Request) {
-  try {
-    const supabase = createClient();
-    const access = await requireCmsWriterAccess(supabase);
-
-    if (!access) {
-      return jsonError('You do not have permission to generate SEO metadata.', 403);
-    }
-
-    // The package gate that /api/ai/generate-blocks is missing (docs/08 follow-up
-    // #6). Metadata generation is a paid Cortex AI feature that burns either the
-    // operator's own OpenRouter credit or the shared house key, so an install
-    // without an active `cortex-ai` activation must not reach a model at all. The
-    // package id is `cortex-ai`; `ai` is not a package id anywhere in this system.
-    const isCortexAiActive = await verifyPackageOnline('cortex-ai');
-
-    if (!isCortexAiActive) {
-      return jsonError('NextBlock Cortex AI is not active for this workspace.', 403);
-    }
-
-    const body = await request.json().catch(() => null);
-    const parsedRequest = seoMetadataRequestSchema.safeParse(body);
-
-    if (!parsedRequest.success) {
-      return jsonError('Invalid Cortex AI SEO metadata request.', 400);
-    }
-
-    // Sandbox installs have no server-side OpenRouter credential at all: the demo
-    // visitor pastes their own key into the browser, it lives in localStorage under
-    // `cortex_ai_sandbox_openrouter_api_key`, and it rides along on these headers.
-    // The env guard matters as much as the headers do — outside a sandbox the
-    // server must never accept a caller-supplied credential, because that would let
-    // any authenticated writer redirect generation through a key the operator never
-    // chose.
-    const sandboxKey =
-      process.env.NEXT_PUBLIC_IS_SANDBOX === 'true'
-        ? request.headers.get('x-sandbox-openrouter-key')
-        : null;
-    const sandboxModelRaw =
-      process.env.NEXT_PUBLIC_IS_SANDBOX === 'true'
-        ? request.headers.get('x-sandbox-openrouter-model')
-        : null;
-
-    let modelSelection = null;
-    if (sandboxModelRaw) {
-      try {
-        modelSelection = safeParseCortexAiModelSelection(JSON.parse(sandboxModelRaw));
-      } catch {
-        // Ignore malformed sandbox model headers.
-      }
-    }
-
-    // `generateCortexAiSeoMetadata` accepts a requested model id rather than a
-    // whole stored selection; the header is still parsed through
-    // `safeParseCortexAiModelSelection` so that a malformed value is discarded
-    // instead of being forwarded as a bogus id. Note that the ordinary text routing
-    // policy will IGNORE the requested id whenever the credential came from the
-    // environment, which is exactly the intended behaviour here: a model choice is
-    // only ever honoured when it arrives with the key that will pay for it.
-    const result = await generateCortexAiSeoMetadata({
-      apiKey: sandboxKey || undefined,
-      content: parsedRequest.data.content,
-      focusKeyword: parsedRequest.data.focusKeyword,
-      locale: parsedRequest.data.locale,
-      modelId: sandboxKey && modelSelection ? modelSelection.modelId : undefined,
-      siteTitle: parsedRequest.data.siteTitle,
-      title: parsedRequest.data.title,
-    });
-
-    return NextResponse.json(
-      {
-        credentialSource: result.credentialSource,
-        metaDescription: result.metaDescription,
-        metaTitle: result.metaTitle,
-        modelId: result.modelId,
-        ogDescription: result.ogDescription,
-        ogTitle: result.ogTitle,
-      },
-      {
-        headers: {
-          'x-cortex-ai-credential-source': result.credentialSource,
-          'x-cortex-ai-model': result.modelId,
-        },
-      }
-    );
-  } catch (error) {
-    // A CortexAiRoutingError is recognised STRUCTURALLY rather than with
-    // `instanceof`. The class is defined in @nextblock-cms/cortex, which resolves to
-    // library source inside this monorepo but to a published package in a
-    // standalone install; when both shapes end up in one bundle the two class
-    // identities are not the same object and `instanceof` silently returns false,
-    // swallowing the per-model attempt log that is the only useful diagnostic for a
-    // routing failure.
-    if (error && typeof error === 'object' && 'attempts' in error) {
-      console.error(
-        '[Cortex AI] Failed to generate SEO metadata after model attempts:',
-        JSON.stringify((error as { attempts: unknown }).attempts, null, 2)
-      );
-    }
-
-    console.error('[Cortex AI] Failed to generate SEO metadata:', error);
-    return jsonError(
-      summarizeCortexAiRoutingError(error, 'Failed to generate SEO metadata.'),
-      500
-    );
-  }
-}
+import { NextResponse } from 'next/server';
+
+import { createClient, verifyPackageOnline } from '@nextblock-cms/db/server';
+
+import { generateCortexAiSeoMetadata } from '@nextblock-cms/cortex';
+import {
+  safeParseCortexAiModelSelection,
+  summarizeCortexAiRoutingError,
+} from '@nextblock-cms/cortex';
+
+import { z } from '../../../../../lib/zod-config';
+
+export const dynamic = 'force-dynamic';
+
+type SupabaseServerClient = ReturnType<typeof createClient>;
+
+/**
+ * How much page copy this endpoint will accept in one request.
+ *
+ * The engine truncates the content to `CORTEX_AI_SEO_METADATA_CONTENT_BUDGET`
+ * (6000 characters) before it ever reaches a model, so anything beyond that is
+ * discarded rather than summarised. This ceiling is therefore not a content rule —
+ * it is a request-body bound, set far above the engine's budget so that a genuinely
+ * long post is never rejected with a confusing 400, but low enough that a runaway
+ * client cannot push megabytes of HTML through the JSON parser on every keystroke
+ * of an editor that generates metadata as you type.
+ */
+const SEO_METADATA_CONTENT_REQUEST_LIMIT = 200_000;
+
+/**
+ * The request contract for the metadata endpoint.
+ *
+ * Strict, for the reason every Cortex request schema is strict: an unrecognised key
+ * means the caller and this route disagree about the contract, and the failure mode
+ * of quietly dropping it is a generation that ignored the focus keyword or the
+ * locale the caller thought it had supplied. A 400 naming the mismatch is far
+ * cheaper to debug than metadata that is merely subtly wrong.
+ *
+ * Only `content` is required. Everything else is a hint the engine folds into the
+ * prompt when present and omits entirely when absent, which is why each optional
+ * field is bounded but never given a minimum beyond one character — an empty string
+ * from a form field that the user left blank should not fail the whole request, and
+ * the engine's own `?.trim() || null` normalisation already treats blank as absent.
+ */
+const seoMetadataRequestSchema = z.strictObject({
+  content: z.string().min(1).max(SEO_METADATA_CONTENT_REQUEST_LIMIT),
+  focusKeyword: z.string().max(200).optional(),
+  locale: z.string().max(64).optional(),
+  siteTitle: z.string().max(200).optional(),
+  title: z.string().max(500).optional(),
+});
+
+async function requireCmsWriterAccess(supabase: SupabaseServerClient) {
+  const {
+    data: { user },
+    error: userError,
+  } = await supabase.auth.getUser();
+
+  if (userError || !user) {
+    return null;
+  }
+
+  const { data: profile, error: profileError } = await supabase
+    .from('profiles')
+    .select('role')
+    .eq('id', user.id)
+    .single();
+
+  if (profileError || !profile || !['ADMIN', 'WRITER'].includes(profile.role)) {
+    return null;
+  }
+
+  return { userId: user.id };
+}
+
+function jsonError(message: string, status: number) {
+  return NextResponse.json({ error: message }, { status });
+}
+
+export async function POST(request: Request) {
+  try {
+    const supabase = createClient();
+    const access = await requireCmsWriterAccess(supabase);
+
+    if (!access) {
+      return jsonError('You do not have permission to generate SEO metadata.', 403);
+    }
+
+    // The package gate that /api/ai/generate-blocks is missing (docs/08 follow-up
+    // #6). Metadata generation is a paid Cortex AI feature that burns either the
+    // operator's own OpenRouter credit or the shared house key, so an install
+    // without an active `cortex-ai` activation must not reach a model at all. The
+    // package id is `cortex-ai`; `ai` is not a package id anywhere in this system.
+    const isCortexAiActive = await verifyPackageOnline('cortex-ai');
+
+    if (!isCortexAiActive) {
+      return jsonError('NextBlock Cortex AI is not active for this workspace.', 403);
+    }
+
+    const body = await request.json().catch(() => null);
+    const parsedRequest = seoMetadataRequestSchema.safeParse(body);
+
+    if (!parsedRequest.success) {
+      return jsonError('Invalid Cortex AI SEO metadata request.', 400);
+    }
+
+    // Sandbox installs have no server-side OpenRouter credential at all: the demo
+    // visitor pastes their own key into the browser, it lives in localStorage under
+    // `cortex_ai_sandbox_openrouter_api_key`, and it rides along on these headers.
+    // The env guard matters as much as the headers do — outside a sandbox the
+    // server must never accept a caller-supplied credential, because that would let
+    // any authenticated writer redirect generation through a key the operator never
+    // chose.
+    const sandboxKey =
+      process.env.NEXT_PUBLIC_IS_SANDBOX === 'true'
+        ? request.headers.get('x-sandbox-openrouter-key')
+        : null;
+    const sandboxModelRaw =
+      process.env.NEXT_PUBLIC_IS_SANDBOX === 'true'
+        ? request.headers.get('x-sandbox-openrouter-model')
+        : null;
+
+    let modelSelection = null;
+    if (sandboxModelRaw) {
+      try {
+        modelSelection = safeParseCortexAiModelSelection(JSON.parse(sandboxModelRaw));
+      } catch {
+        // Ignore malformed sandbox model headers.
+      }
+    }
+
+    // `generateCortexAiSeoMetadata` accepts a requested model id rather than a
+    // whole stored selection; the header is still parsed through
+    // `safeParseCortexAiModelSelection` so that a malformed value is discarded
+    // instead of being forwarded as a bogus id. Note that the ordinary text routing
+    // policy will IGNORE the requested id whenever the credential came from the
+    // environment, which is exactly the intended behaviour here: a model choice is
+    // only ever honoured when it arrives with the key that will pay for it.
+    const result = await generateCortexAiSeoMetadata({
+      apiKey: sandboxKey || undefined,
+      content: parsedRequest.data.content,
+      focusKeyword: parsedRequest.data.focusKeyword,
+      locale: parsedRequest.data.locale,
+      modelId: sandboxKey && modelSelection ? modelSelection.modelId : undefined,
+      siteTitle: parsedRequest.data.siteTitle,
+      title: parsedRequest.data.title,
+    });
+
+    return NextResponse.json(
+      {
+        credentialSource: result.credentialSource,
+        metaDescription: result.metaDescription,
+        metaTitle: result.metaTitle,
+        modelId: result.modelId,
+        ogDescription: result.ogDescription,
+        ogTitle: result.ogTitle,
+      },
+      {
+        headers: {
+          'x-cortex-ai-credential-source': result.credentialSource,
+          'x-cortex-ai-model': result.modelId,
+        },
+      }
+    );
+  } catch (error) {
+    // A CortexAiRoutingError is recognised STRUCTURALLY rather than with
+    // `instanceof`. The class is defined in @nextblock-cms/cortex, which resolves to
+    // library source inside this monorepo but to a published package in a
+    // standalone install; when both shapes end up in one bundle the two class
+    // identities are not the same object and `instanceof` silently returns false,
+    // swallowing the per-model attempt log that is the only useful diagnostic for a
+    // routing failure.
+    if (error && typeof error === 'object' && 'attempts' in error) {
+      console.error(
+        '[Cortex AI] Failed to generate SEO metadata after model attempts:',
+        JSON.stringify((error as { attempts: unknown }).attempts, null, 2)
+      );
+    }
+
+    console.error('[Cortex AI] Failed to generate SEO metadata:', error);
+    return jsonError(
+      summarizeCortexAiRoutingError(error, 'Failed to generate SEO metadata.'),
+      500
+    );
+  }
+}

package/templates/nextblock-template/app/api/checkout/freemius/sync/route.ts

@@ -1,29 +1,29 @@
-import { NextResponse } from 'next/server';
-import { syncFreemiusCheckoutOrder } from '@nextblock-cms/ecommerce/server';
-
-export async function POST(req: Request) {
-  try {
-    const body = await req.json();
-    const orderId = typeof body.orderId === 'string' ? body.orderId : null;
-
-    if (!orderId) {
-      return NextResponse.json(
-        { success: false, error: 'Missing Freemius order ID' },
-        { status: 400 }
-      );
-    }
-
-    const result = await syncFreemiusCheckoutOrder({
-      orderId,
-      checkoutResponse: body.checkoutResponse ?? body.response ?? null,
-    });
-
-    return NextResponse.json(result, { status: result.success ? 200 : 400 });
-  } catch (error) {
-    console.error('[Freemius Checkout Sync] Error:', error);
-    return NextResponse.json(
-      { success: false, error: 'Freemius checkout sync failed' },
-      { status: 500 }
-    );
-  }
-}
+import { NextResponse } from 'next/server';
+import { syncFreemiusCheckoutOrder } from '@nextblock-cms/ecommerce/server';
+
+export async function POST(req: Request) {
+  try {
+    const body = await req.json();
+    const orderId = typeof body.orderId === 'string' ? body.orderId : null;
+
+    if (!orderId) {
+      return NextResponse.json(
+        { success: false, error: 'Missing Freemius order ID' },
+        { status: 400 }
+      );
+    }
+
+    const result = await syncFreemiusCheckoutOrder({
+      orderId,
+      checkoutResponse: body.checkoutResponse ?? body.response ?? null,
+    });
+
+    return NextResponse.json(result, { status: result.success ? 200 : 400 });
+  } catch (error) {
+    console.error('[Freemius Checkout Sync] Error:', error);
+    return NextResponse.json(
+      { success: false, error: 'Freemius checkout sync failed' },
+      { status: 500 }
+    );
+  }
+}