create-nextblock 0.16.3 → 0.17.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (201) hide show
  1. package/CLAUDE.md +22 -0
  2. package/docker-template/.env.docker.example +69 -69
  3. package/docker-template/docker/db/init/99-jwt.sql +6 -6
  4. package/docker-template/docker/db/init/99-roles.sql +25 -25
  5. package/docker-template/docker/kong/kong.yml +112 -112
  6. package/docker-template/scripts/docker-setup.mjs +310 -310
  7. package/package.json +1 -1
  8. package/templates/nextblock-template/.browserslistrc +11 -11
  9. package/templates/nextblock-template/.swcrc +30 -30
  10. package/templates/nextblock-template/CLAUDE.md +26 -0
  11. package/templates/nextblock-template/app/(auth-pages)/sign-up/page.tsx +46 -46
  12. package/templates/nextblock-template/app/(auth-pages)/two-factor/page.tsx +51 -51
  13. package/templates/nextblock-template/app/.well-known/ucp/route.ts +16 -16
  14. package/templates/nextblock-template/app/actions/consent.ts +57 -57
  15. package/templates/nextblock-template/app/actions/twoFactorEmail.ts +22 -22
  16. package/templates/nextblock-template/app/api/ai/cortex/build-widget/route.ts +153 -153
  17. package/templates/nextblock-template/app/api/ai/generate-blocks/route.ts +96 -96
  18. package/templates/nextblock-template/app/api/brand/email-logo/route.ts +48 -48
  19. package/templates/nextblock-template/app/api/checkout/freemius/sync/route.ts +29 -29
  20. package/templates/nextblock-template/app/api/cms/check-updates/route.ts +44 -44
  21. package/templates/nextblock-template/app/api/cms/full-backup/export/route.ts +33 -33
  22. package/templates/nextblock-template/app/api/cms/full-backup/restore/route.ts +63 -63
  23. package/templates/nextblock-template/app/api/cron/reset-sandbox/route.ts +270 -205
  24. package/templates/nextblock-template/app/api/cron/reset-sandbox/sandboxResetSql.ts +10388 -9315
  25. package/templates/nextblock-template/app/api/cron/sync-currencies/route.ts +39 -39
  26. package/templates/nextblock-template/app/api/custom-blocks/db-relations/route.ts +92 -92
  27. package/templates/nextblock-template/app/api/custom-blocks/editor-definitions/route.ts +43 -43
  28. package/templates/nextblock-template/app/api/media/library/route.ts +69 -69
  29. package/templates/nextblock-template/app/api/media/r2-presigned/route.ts +53 -53
  30. package/templates/nextblock-template/app/api/visual-editing/block-draft/route.ts +47 -47
  31. package/templates/nextblock-template/app/api/visual-editing/product-draft/route.ts +47 -47
  32. package/templates/nextblock-template/app/article/[slug]/PostClientContent.tsx +442 -441
  33. package/templates/nextblock-template/app/article/[slug]/page.utils.ts +4 -1
  34. package/templates/nextblock-template/app/checkout/UcpCartHydrator.tsx +20 -20
  35. package/templates/nextblock-template/app/cms/blocks/components/BlockEditorModal.tsx +241 -241
  36. package/templates/nextblock-template/app/cms/blocks/components/CustomBlockEditorPreview.tsx +160 -160
  37. package/templates/nextblock-template/app/cms/blocks/editors/DynamicCustomBlockEditor.tsx +167 -167
  38. package/templates/nextblock-template/app/cms/components/ConnectGitHubButton.tsx +122 -122
  39. package/templates/nextblock-template/app/cms/components/CortexAiActiveContext.tsx +23 -23
  40. package/templates/nextblock-template/app/cms/components/SeoScoreBadge.tsx +3 -40
  41. package/templates/nextblock-template/app/cms/components/SystemAlertsBanner.tsx +112 -112
  42. package/templates/nextblock-template/app/cms/components/TablePagination.tsx +136 -136
  43. package/templates/nextblock-template/app/cms/components/TwoFactorReminderBanner.tsx +45 -45
  44. package/templates/nextblock-template/app/cms/components/github-connect-actions.ts +102 -102
  45. package/templates/nextblock-template/app/cms/components/system-alerts-actions.ts +31 -31
  46. package/templates/nextblock-template/app/cms/coupons/[id]/edit/page.tsx +16 -16
  47. package/templates/nextblock-template/app/cms/coupons/page.tsx +16 -16
  48. package/templates/nextblock-template/app/cms/custom-blocks/[id]/edit/page.tsx +66 -66
  49. package/templates/nextblock-template/app/cms/custom-blocks/actions.ts +519 -519
  50. package/templates/nextblock-template/app/cms/custom-blocks/components/BlocksLibraryTransferControls.tsx +256 -256
  51. package/templates/nextblock-template/app/cms/custom-blocks/components/DBRelationSelect.tsx +384 -384
  52. package/templates/nextblock-template/app/cms/custom-blocks/components/ImageR2Picker.tsx +221 -221
  53. package/templates/nextblock-template/app/cms/custom-blocks/new/page.tsx +12 -12
  54. package/templates/nextblock-template/app/cms/custom-blocks/page.tsx +438 -438
  55. package/templates/nextblock-template/app/cms/dashboard/components/DashboardComponents.tsx +200 -200
  56. package/templates/nextblock-template/app/cms/dashboard/components/DashboardOnboarding.tsx +130 -130
  57. package/templates/nextblock-template/app/cms/import-export/actions.ts +226 -226
  58. package/templates/nextblock-template/app/cms/pages/page.tsx +273 -273
  59. package/templates/nextblock-template/app/cms/posts/page.tsx +251 -251
  60. package/templates/nextblock-template/app/cms/products/ProductFormClientShell.tsx +19 -0
  61. package/templates/nextblock-template/app/cms/products/[id]/edit/page.tsx +14 -2
  62. package/templates/nextblock-template/app/cms/products/categories/page.tsx +12 -12
  63. package/templates/nextblock-template/app/cms/products/new/page.tsx +135 -135
  64. package/templates/nextblock-template/app/cms/promotions/PromotionsWorkspace.tsx +456 -456
  65. package/templates/nextblock-template/app/cms/promotions/actions.ts +115 -115
  66. package/templates/nextblock-template/app/cms/promotions/page.tsx +31 -31
  67. package/templates/nextblock-template/app/cms/settings/backup-restore/BackupRestoreWorkspace.tsx +1004 -1004
  68. package/templates/nextblock-template/app/cms/settings/backup-restore/page.tsx +29 -29
  69. package/templates/nextblock-template/app/cms/settings/bot-protection/page.tsx +24 -24
  70. package/templates/nextblock-template/app/cms/settings/email/page.tsx +28 -28
  71. package/templates/nextblock-template/app/cms/settings/extra-translations/actions.ts +276 -276
  72. package/templates/nextblock-template/app/cms/settings/google-analytics/page.tsx +26 -26
  73. package/templates/nextblock-template/app/cms/settings/logos/components/DeleteLogoButton.tsx +21 -21
  74. package/templates/nextblock-template/app/cms/settings/logos/components/SetActiveLogoButton.tsx +42 -42
  75. package/templates/nextblock-template/app/cms/settings/logos/components/SiteSeoSettingsForm.tsx +133 -133
  76. package/templates/nextblock-template/app/cms/settings/privacy/page.tsx +27 -27
  77. package/templates/nextblock-template/app/cms/settings/registration/page.tsx +27 -27
  78. package/templates/nextblock-template/app/cms/settings/security/page.tsx +33 -33
  79. package/templates/nextblock-template/app/lib/site-settings.ts +105 -105
  80. package/templates/nextblock-template/app/lib/ucp/protocol.ts +190 -190
  81. package/templates/nextblock-template/app/lib/ucp/server.test.ts +56 -56
  82. package/templates/nextblock-template/app/setup/SetupWizard.tsx +678 -678
  83. package/templates/nextblock-template/app/setup/layout.tsx +13 -13
  84. package/templates/nextblock-template/app/setup/page.tsx +111 -111
  85. package/templates/nextblock-template/app/ucp/v1/carts/[id]/cancel/route.ts +38 -38
  86. package/templates/nextblock-template/app/ucp/v1/carts/[id]/route.ts +68 -68
  87. package/templates/nextblock-template/app/ucp/v1/carts/route.ts +35 -35
  88. package/templates/nextblock-template/app/ucp/v1/catalog/lookup/route.ts +35 -35
  89. package/templates/nextblock-template/app/ucp/v1/catalog/product/route.ts +35 -35
  90. package/templates/nextblock-template/app/ucp/v1/catalog/search/route.ts +34 -34
  91. package/templates/nextblock-template/components/CartTranslator.tsx +210 -210
  92. package/templates/nextblock-template/components/DeferredCartTranslator.tsx +51 -51
  93. package/templates/nextblock-template/components/DeferredGlobalSearch.tsx +68 -68
  94. package/templates/nextblock-template/components/DeferredGoogleAnalytics.tsx +70 -70
  95. package/templates/nextblock-template/components/FeatureImageHero.tsx +47 -47
  96. package/templates/nextblock-template/components/GlobalSearch.tsx +557 -557
  97. package/templates/nextblock-template/components/Header.tsx +38 -38
  98. package/templates/nextblock-template/components/PublicEnvBootstrap.tsx +30 -30
  99. package/templates/nextblock-template/components/ResponsiveNav.tsx +14 -14
  100. package/templates/nextblock-template/components/auth/AuthBotProtection.tsx +182 -182
  101. package/templates/nextblock-template/components/blocks/PostsGridClient.tsx +48 -48
  102. package/templates/nextblock-template/components/blocks/TestimonialBlock.tsx +9 -9
  103. package/templates/nextblock-template/components/blocks/publicRendererLoaders.ts +25 -25
  104. package/templates/nextblock-template/components/blocks/renderers/ButtonBlockRenderer.tsx +92 -92
  105. package/templates/nextblock-template/components/blocks/renderers/ClientTextBlockRenderer.tsx +11 -0
  106. package/templates/nextblock-template/components/blocks/renderers/PostsGridBlockRenderer.tsx +24 -24
  107. package/templates/nextblock-template/components/blocks/renderers/TestimonialBlockRenderer.tsx +57 -57
  108. package/templates/nextblock-template/components/blocks/renderers/inline/AlertWidgetRenderer.tsx +2 -2
  109. package/templates/nextblock-template/components/blocks/renderers/inline/CtaWidgetRenderer.tsx +2 -2
  110. package/templates/nextblock-template/components/media/YouTubeFacade.tsx +105 -105
  111. package/templates/nextblock-template/components/media/youtube-embed-replace.tsx +32 -32
  112. package/templates/nextblock-template/components/privacy/ConsentBanner.tsx +170 -170
  113. package/templates/nextblock-template/components/privacy/ConsentGatedAnalytics.tsx +70 -70
  114. package/templates/nextblock-template/components/renderers/CachedDynamicLayoutEngine.tsx +28 -28
  115. package/templates/nextblock-template/components/renderers/DynamicLayoutEngine.test.tsx +166 -166
  116. package/templates/nextblock-template/components/renderers/DynamicLayoutEngine.tsx +471 -471
  117. package/templates/nextblock-template/components/visual-editing/DeferredVisualEditing.tsx +21 -21
  118. package/templates/nextblock-template/context/language-rest-client.ts +32 -32
  119. package/templates/nextblock-template/docker/db/init/99-jwt.sql +6 -6
  120. package/templates/nextblock-template/docker/db/init/99-roles.sql +25 -25
  121. package/templates/nextblock-template/docker/kong/kong.yml +112 -112
  122. package/templates/nextblock-template/docs/02-ECOMMERCE-CAPABILITIES.md +364 -364
  123. package/templates/nextblock-template/docs/04-DATABASE-AND-AUTH.md +11 -0
  124. package/templates/nextblock-template/docs/07-BLOCK-SDK-AND-EXTENSIBILITY.md +146 -146
  125. package/templates/nextblock-template/docs/08-NEXTBLOCK-CORTEX-AI-ARCHITECTURE.md +19 -0
  126. package/templates/nextblock-template/docs/10-CUSTOM-BLOCKS.md +222 -222
  127. package/templates/nextblock-template/lib/app-secrets.ts +39 -39
  128. package/templates/nextblock-template/lib/auth/cookies.ts +47 -47
  129. package/templates/nextblock-template/lib/auth/crypto.ts +45 -45
  130. package/templates/nextblock-template/lib/auth/trustedDevices.ts +92 -92
  131. package/templates/nextblock-template/lib/blocks/README.md +13 -13
  132. package/templates/nextblock-template/lib/botProtection/verify.ts +134 -134
  133. package/templates/nextblock-template/lib/cms/payments-reminder.test.ts +135 -135
  134. package/templates/nextblock-template/lib/cms/payments-reminder.ts +105 -105
  135. package/templates/nextblock-template/lib/cms-transfer/types.ts +145 -145
  136. package/templates/nextblock-template/lib/custom-block-definitions.ts +87 -87
  137. package/templates/nextblock-template/lib/custom-block-r2-upload-shared.ts +178 -178
  138. package/templates/nextblock-template/lib/custom-block-r2-upload.test.ts +140 -140
  139. package/templates/nextblock-template/lib/custom-block-r2-upload.ts +88 -88
  140. package/templates/nextblock-template/lib/custom-block-relations.test.ts +227 -227
  141. package/templates/nextblock-template/lib/custom-block-relations.ts +279 -279
  142. package/templates/nextblock-template/lib/custom-block-safelist.ts +14 -14
  143. package/templates/nextblock-template/lib/editor/dynamic-extension-core.test.ts +172 -172
  144. package/templates/nextblock-template/lib/editor/dynamic-extension-core.ts +213 -213
  145. package/templates/nextblock-template/lib/editor/dynamic-extension-loader.ts +22 -22
  146. package/templates/nextblock-template/lib/editor/dynamic-extensions.tsx +193 -193
  147. package/templates/nextblock-template/lib/email/branding-format.test.ts +133 -133
  148. package/templates/nextblock-template/lib/email/branding-format.ts +123 -123
  149. package/templates/nextblock-template/lib/email/branding.ts +76 -76
  150. package/templates/nextblock-template/lib/full-backup/manifest.test.ts +121 -121
  151. package/templates/nextblock-template/lib/full-backup/manifest.ts +206 -206
  152. package/templates/nextblock-template/lib/logos/active-logo.ts +53 -53
  153. package/templates/nextblock-template/lib/media/resolveMediaUrl.ts +56 -54
  154. package/templates/nextblock-template/lib/media/youtube.ts +99 -99
  155. package/templates/nextblock-template/lib/onboarding/actions.ts +31 -31
  156. package/templates/nextblock-template/lib/privacy/consent-client.ts +57 -57
  157. package/templates/nextblock-template/lib/privacy/contact-emails.ts +64 -64
  158. package/templates/nextblock-template/lib/privacy/settings.ts +115 -115
  159. package/templates/nextblock-template/lib/privacy/types.ts +69 -69
  160. package/templates/nextblock-template/lib/promotions/server.test.ts +74 -74
  161. package/templates/nextblock-template/lib/promotions/server.ts +741 -741
  162. package/templates/nextblock-template/lib/resolve-block-relations.test.ts +142 -142
  163. package/templates/nextblock-template/lib/resolve-block-relations.ts +255 -255
  164. package/templates/nextblock-template/lib/seo/page-audit-context.tsx +3 -3
  165. package/templates/nextblock-template/lib/seo/page-document.test.ts +34 -0
  166. package/templates/nextblock-template/lib/seo/page-document.ts +3 -462
  167. package/templates/nextblock-template/lib/seo/robots-txt.ts +5 -4
  168. package/templates/nextblock-template/lib/setup/actions.ts +460 -460
  169. package/templates/nextblock-template/lib/setup/env-status.ts +125 -125
  170. package/templates/nextblock-template/lib/setup/env-write.ts +111 -111
  171. package/templates/nextblock-template/lib/setup/migrations-bundle.ts +50 -10
  172. package/templates/nextblock-template/lib/setup/provisioning.ts +59 -59
  173. package/templates/nextblock-template/lib/setup/schema-apply.ts +408 -408
  174. package/templates/nextblock-template/lib/setup/system-config.ts +105 -105
  175. package/templates/nextblock-template/lib/setup/types.ts +18 -18
  176. package/templates/nextblock-template/lib/storage/provider.ts +66 -66
  177. package/templates/nextblock-template/lib/storage/supabase-storage.ts +103 -103
  178. package/templates/nextblock-template/lib/updates/github-device.ts +206 -206
  179. package/templates/nextblock-template/lib/updates/repo-identity.ts +56 -56
  180. package/templates/nextblock-template/lib/visual-editing/draft-content.test.ts +105 -105
  181. package/templates/nextblock-template/lib/visual-editing/draft-route.test.ts +42 -42
  182. package/templates/nextblock-template/lib/visual-editing/edit-info.test.ts +143 -143
  183. package/templates/nextblock-template/lib/visual-editing/edit-info.ts +94 -94
  184. package/templates/nextblock-template/lib/visual-editing/product-drafts.test.ts +81 -81
  185. package/templates/nextblock-template/lib/zod-config.ts +5 -5
  186. package/templates/nextblock-template/next-env.d.ts +1 -0
  187. package/templates/nextblock-template/package.json +1 -1
  188. package/templates/nextblock-template/public/images/cortex_post.webp +0 -0
  189. package/templates/nextblock-template/public/images/update_nextblock.webp +0 -0
  190. package/templates/nextblock-template/scripts/docker-setup.mjs +310 -310
  191. package/templates/nextblock-template/scripts/validate-editor-block-schema.ts +112 -112
  192. package/templates/nextblock-template/scripts/verify-cortex-ai-build-widget.tsx +98 -98
  193. package/templates/nextblock-template/scripts/verify-cortex-ai-generate-blocks.ts +62 -62
  194. package/templates/nextblock-template/scripts/verify-cortex-ai-global-tools.ts +537 -537
  195. package/templates/nextblock-template/scripts/verify-cortex-ai-routing.ts +58 -58
  196. package/templates/nextblock-template/scripts/verify-custom-block-definitions.ts +188 -188
  197. package/templates/nextblock-template/scripts/verify-dynamic-custom-block-extensions.ts +123 -123
  198. package/templates/nextblock-template/scripts/verify-dynamic-layout-engine.tsx +133 -133
  199. package/templates/nextblock-template/scripts/verify-milestone-2-custom-blocks.ts +65 -65
  200. package/templates/nextblock-template/tools/deploy-supabase.js +159 -159
  201. package/templates/nextblock-template/types/jsdom.d.ts +6 -6
@@ -1,105 +1,105 @@
1
- 'use client';
2
-
3
- import React, { useState } from 'react';
4
- import Image from 'next/image';
5
- import {
6
- buildNoCookieEmbedUrl,
7
- youTubePosterUrl,
8
- YOUTUBE_POSTER_DIMENSIONS,
9
- type YouTubePosterQuality,
10
- } from '../../lib/media/youtube';
11
-
12
- interface YouTubeFacadeProps {
13
- videoId: string;
14
- title?: string;
15
- /** Serialized extra player params (from parseYouTubeUrl). */
16
- query?: string;
17
- /** Classes for the clickable surface / injected iframe. Defaults to filling its parent. */
18
- className?: string;
19
- /**
20
- * Above-the-fold embeds. The poster is very often the page's LCP element, so
21
- * this preloads it, marks it fetchpriority=high and drops lazy-loading.
22
- */
23
- priority?: boolean;
24
- /** Responsive-srcset layout hint; override when the embed is not ~half-width. */
25
- sizes?: string;
26
- }
27
-
28
- const FILL = 'absolute inset-0 h-full w-full';
29
- // The video block is content-width, so it is full-bleed on phones and roughly a
30
- // column wide on desktop. Callers that know better pass their own `sizes`.
31
- const DEFAULT_SIZES = '(max-width: 768px) 100vw, 50vw';
32
-
33
- /**
34
- * Click-to-play YouTube facade: renders a poster + play button and loads no
35
- * youtube.com resource at all until the user clicks. This is what keeps the
36
- * Lighthouse `inspector-issues` audit green -- the nocookie host still writes
37
- * cookies from the player JS, so the only reliable fix is not booting the
38
- * player during the audit. See lib/media/youtube.ts.
39
- */
40
- const YouTubeFacade: React.FC<YouTubeFacadeProps> = ({
41
- videoId,
42
- title,
43
- query,
44
- className,
45
- priority = false,
46
- sizes,
47
- }) => {
48
- const [activated, setActivated] = useState(false);
49
- const [posterQuality, setPosterQuality] = useState<YouTubePosterQuality>('maxres');
50
- const label = title || 'YouTube video';
51
- const surface = className || FILL;
52
- const poster = youTubePosterUrl(videoId, posterQuality);
53
- const posterSize = YOUTUBE_POSTER_DIMENSIONS[posterQuality];
54
-
55
- if (activated) {
56
- return (
57
- <iframe
58
- className={surface}
59
- src={buildNoCookieEmbedUrl(videoId, new URLSearchParams(query || ''), { autoplay: true })}
60
- title={label}
61
- allow="autoplay; accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
62
- referrerPolicy="strict-origin-when-cross-origin"
63
- allowFullScreen
64
- />
65
- );
66
- }
67
-
68
- return (
69
- <button
70
- type="button"
71
- onClick={() => setActivated(true)}
72
- aria-label={`Play video: ${label}`}
73
- className={`${surface} group flex items-center justify-center overflow-hidden border-0 bg-black p-0`}
74
- >
75
- {/* Routed through next/image on purpose: i.ytimg.com serves the poster as a
76
- full-size JPEG with a 2h cache TTL, which made a ~205 KiB download the LCP
77
- for a thumbnail-sized slot. The optimizer re-encodes to AVIF/WebP at the
78
- displayed width and serves it same-origin under the app's long cache TTL. */}
79
- <Image
80
- src={poster}
81
- alt=""
82
- aria-hidden="true"
83
- width={posterSize.width}
84
- height={posterSize.height}
85
- sizes={sizes || DEFAULT_SIZES}
86
- quality={60}
87
- priority={priority}
88
- fetchPriority={priority ? 'high' : undefined}
89
- loading={priority ? undefined : 'lazy'}
90
- decoding="async"
91
- // maxresdefault.jpg is not uploaded for every video; fall back to the
92
- // hqdefault variant, which always exists.
93
- onError={() => setPosterQuality((current) => (current === 'maxres' ? 'hq' : current))}
94
- className="absolute inset-0 h-full w-full object-cover opacity-90 transition group-hover:opacity-100"
95
- />
96
- <span className="relative flex h-16 w-16 items-center justify-center rounded-full bg-black/70 text-white shadow-lg transition group-hover:scale-110 group-hover:bg-red-600">
97
- <svg viewBox="0 0 24 24" className="ml-1 h-7 w-7" aria-hidden="true" focusable="false">
98
- <path d="M8 5v14l11-7z" fill="currentColor" />
99
- </svg>
100
- </span>
101
- </button>
102
- );
103
- };
104
-
105
- export default YouTubeFacade;
1
+ 'use client';
2
+
3
+ import React, { useState } from 'react';
4
+ import Image from 'next/image';
5
+ import {
6
+ buildNoCookieEmbedUrl,
7
+ youTubePosterUrl,
8
+ YOUTUBE_POSTER_DIMENSIONS,
9
+ type YouTubePosterQuality,
10
+ } from '../../lib/media/youtube';
11
+
12
+ interface YouTubeFacadeProps {
13
+ videoId: string;
14
+ title?: string;
15
+ /** Serialized extra player params (from parseYouTubeUrl). */
16
+ query?: string;
17
+ /** Classes for the clickable surface / injected iframe. Defaults to filling its parent. */
18
+ className?: string;
19
+ /**
20
+ * Above-the-fold embeds. The poster is very often the page's LCP element, so
21
+ * this preloads it, marks it fetchpriority=high and drops lazy-loading.
22
+ */
23
+ priority?: boolean;
24
+ /** Responsive-srcset layout hint; override when the embed is not ~half-width. */
25
+ sizes?: string;
26
+ }
27
+
28
+ const FILL = 'absolute inset-0 h-full w-full';
29
+ // The video block is content-width, so it is full-bleed on phones and roughly a
30
+ // column wide on desktop. Callers that know better pass their own `sizes`.
31
+ const DEFAULT_SIZES = '(max-width: 768px) 100vw, 50vw';
32
+
33
+ /**
34
+ * Click-to-play YouTube facade: renders a poster + play button and loads no
35
+ * youtube.com resource at all until the user clicks. This is what keeps the
36
+ * Lighthouse `inspector-issues` audit green -- the nocookie host still writes
37
+ * cookies from the player JS, so the only reliable fix is not booting the
38
+ * player during the audit. See lib/media/youtube.ts.
39
+ */
40
+ const YouTubeFacade: React.FC<YouTubeFacadeProps> = ({
41
+ videoId,
42
+ title,
43
+ query,
44
+ className,
45
+ priority = false,
46
+ sizes,
47
+ }) => {
48
+ const [activated, setActivated] = useState(false);
49
+ const [posterQuality, setPosterQuality] = useState<YouTubePosterQuality>('maxres');
50
+ const label = title || 'YouTube video';
51
+ const surface = className || FILL;
52
+ const poster = youTubePosterUrl(videoId, posterQuality);
53
+ const posterSize = YOUTUBE_POSTER_DIMENSIONS[posterQuality];
54
+
55
+ if (activated) {
56
+ return (
57
+ <iframe
58
+ className={surface}
59
+ src={buildNoCookieEmbedUrl(videoId, new URLSearchParams(query || ''), { autoplay: true })}
60
+ title={label}
61
+ allow="autoplay; accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
62
+ referrerPolicy="strict-origin-when-cross-origin"
63
+ allowFullScreen
64
+ />
65
+ );
66
+ }
67
+
68
+ return (
69
+ <button
70
+ type="button"
71
+ onClick={() => setActivated(true)}
72
+ aria-label={`Play video: ${label}`}
73
+ className={`${surface} group flex items-center justify-center overflow-hidden border-0 bg-black p-0`}
74
+ >
75
+ {/* Routed through next/image on purpose: i.ytimg.com serves the poster as a
76
+ full-size JPEG with a 2h cache TTL, which made a ~205 KiB download the LCP
77
+ for a thumbnail-sized slot. The optimizer re-encodes to AVIF/WebP at the
78
+ displayed width and serves it same-origin under the app's long cache TTL. */}
79
+ <Image
80
+ src={poster}
81
+ alt=""
82
+ aria-hidden="true"
83
+ width={posterSize.width}
84
+ height={posterSize.height}
85
+ sizes={sizes || DEFAULT_SIZES}
86
+ quality={60}
87
+ priority={priority}
88
+ fetchPriority={priority ? 'high' : undefined}
89
+ loading={priority ? undefined : 'lazy'}
90
+ decoding="async"
91
+ // maxresdefault.jpg is not uploaded for every video; fall back to the
92
+ // hqdefault variant, which always exists.
93
+ onError={() => setPosterQuality((current) => (current === 'maxres' ? 'hq' : current))}
94
+ className="absolute inset-0 h-full w-full object-cover opacity-90 transition group-hover:opacity-100"
95
+ />
96
+ <span className="relative flex h-16 w-16 items-center justify-center rounded-full bg-black/70 text-white shadow-lg transition group-hover:scale-110 group-hover:bg-red-600">
97
+ <svg viewBox="0 0 24 24" className="ml-1 h-7 w-7" aria-hidden="true" focusable="false">
98
+ <path d="M8 5v14l11-7z" fill="currentColor" />
99
+ </svg>
100
+ </span>
101
+ </button>
102
+ );
103
+ };
104
+
105
+ export default YouTubeFacade;
@@ -1,32 +1,32 @@
1
- import React from 'react';
2
- import { Element, type HTMLReactParserOptions } from 'html-react-parser';
3
- import YouTubeFacade from './YouTubeFacade';
4
- import { parseYouTubeUrl } from '../../lib/media/youtube';
5
-
6
- /**
7
- * html-react-parser `replace` helper: swaps any YouTube <iframe> for a
8
- * click-to-play facade (zero third-party requests on load) and forces
9
- * loading="lazy" on every other third-party frame.
10
- * Returns undefined to let the parser render the node normally.
11
- */
12
- export function replaceYouTubeIframe(domNode: Element): React.ReactElement | undefined {
13
- if (domNode.name !== 'iframe' || !domNode.attribs) return undefined;
14
- const parsed = parseYouTubeUrl(domNode.attribs.src);
15
- if (!parsed) {
16
- if (!domNode.attribs.loading) domNode.attribs.loading = 'lazy';
17
- return undefined;
18
- }
19
- return (
20
- <YouTubeFacade
21
- videoId={parsed.videoId}
22
- title={domNode.attribs.title}
23
- query={parsed.params.toString()}
24
- className={domNode.attribs.class}
25
- />
26
- );
27
- }
28
-
29
- /** Minimal parser options for raw-HTML surfaces that only need embed safety. */
30
- export const embedSafeParserOptions: HTMLReactParserOptions = {
31
- replace: (domNode) => (domNode instanceof Element ? replaceYouTubeIframe(domNode) : undefined),
32
- };
1
+ import React from 'react';
2
+ import { Element, type HTMLReactParserOptions } from 'html-react-parser';
3
+ import YouTubeFacade from './YouTubeFacade';
4
+ import { parseYouTubeUrl } from '../../lib/media/youtube';
5
+
6
+ /**
7
+ * html-react-parser `replace` helper: swaps any YouTube <iframe> for a
8
+ * click-to-play facade (zero third-party requests on load) and forces
9
+ * loading="lazy" on every other third-party frame.
10
+ * Returns undefined to let the parser render the node normally.
11
+ */
12
+ export function replaceYouTubeIframe(domNode: Element): React.ReactElement | undefined {
13
+ if (domNode.name !== 'iframe' || !domNode.attribs) return undefined;
14
+ const parsed = parseYouTubeUrl(domNode.attribs.src);
15
+ if (!parsed) {
16
+ if (!domNode.attribs.loading) domNode.attribs.loading = 'lazy';
17
+ return undefined;
18
+ }
19
+ return (
20
+ <YouTubeFacade
21
+ videoId={parsed.videoId}
22
+ title={domNode.attribs.title}
23
+ query={parsed.params.toString()}
24
+ className={domNode.attribs.class}
25
+ />
26
+ );
27
+ }
28
+
29
+ /** Minimal parser options for raw-HTML surfaces that only need embed safety. */
30
+ export const embedSafeParserOptions: HTMLReactParserOptions = {
31
+ replace: (domNode) => (domNode instanceof Element ? replaceYouTubeIframe(domNode) : undefined),
32
+ };
@@ -1,170 +1,170 @@
1
- 'use client';
2
-
3
- import { useEffect, useState } from 'react';
4
- import Link from 'next/link';
5
- import { useTranslations } from '@nextblock-cms/utils';
6
- import { logConsentDecision } from '../../app/actions/consent';
7
- import { readConsent, writeConsent } from '../../lib/privacy/consent-client';
8
-
9
- /**
10
- * Minimal floating consent pill, bottom-right. Renders nothing once a decision
11
- * exists (the nb_consent_preference cookie). Decisions persist client-side and
12
- * are mirrored to privacy_consent_logs for accountability.
13
- */
14
- export function ConsentBanner() {
15
- const { lang, t } = useTranslations();
16
- const [visible, setVisible] = useState(false);
17
- const [managing, setManaging] = useState(false);
18
- const [analytics, setAnalytics] = useState(true);
19
- const [marketing, setMarketing] = useState(false);
20
- const isFrench = lang.toLowerCase().startsWith('fr');
21
-
22
- const translate = (key: string, fallback: string) => {
23
- const translated = t(key);
24
- return translated === key ? fallback : translated;
25
- };
26
-
27
- const privacyPolicyHref = translate(
28
- 'privacy.consent.privacy_policy_href',
29
- isFrench ? '/politique-de-confidentialite' : '/privacy-policy',
30
- );
31
-
32
- useEffect(() => {
33
- if (!readConsent()) setVisible(true);
34
- }, []);
35
-
36
- const decide = (choice: { analytics: boolean; marketing: boolean }) => {
37
- const pref = writeConsent(choice);
38
- void logConsentDecision({
39
- token: pref.token,
40
- analytics: choice.analytics,
41
- marketing: choice.marketing,
42
- });
43
- setVisible(false);
44
- };
45
-
46
- if (!visible) return null;
47
-
48
- return (
49
- <div
50
- role="dialog"
51
- aria-label={translate('privacy.consent.aria_label', 'Privacy consent')}
52
- className="fixed bottom-4 right-4 z-[70] w-[min(92vw,360px)] animate-in fade-in slide-in-from-bottom-2 duration-300"
53
- >
54
- <div className="rounded-2xl border border-slate-200/70 bg-white/95 p-4 shadow-[0_8px_30px_rgba(15,23,42,0.12)] backdrop-blur-md dark:border-slate-700/60 dark:bg-slate-900/95 dark:shadow-[0_8px_30px_rgba(0,0,0,0.5)]">
55
- <p className="text-sm font-medium text-slate-900 dark:text-slate-100">
56
- {translate('privacy.consent.title', 'We value your privacy')}
57
- </p>
58
- <p className="mt-1 text-xs leading-relaxed text-slate-500 dark:text-slate-400">
59
- {translate(
60
- 'privacy.consent.description_before_policy_link',
61
- 'We use only essential cookies by default. With your consent we also use analytics to improve the site. See our',
62
- )}{' '}
63
- <Link
64
- href={privacyPolicyHref}
65
- className="underline underline-offset-2 hover:text-slate-700 dark:hover:text-slate-200"
66
- >
67
- {translate('privacy.consent.privacy_policy_link', 'Privacy Policy')}
68
- </Link>
69
- {translate('privacy.consent.description_after_policy_link', '.')}
70
- </p>
71
-
72
- {managing && (
73
- <div className="mt-3 space-y-2 rounded-lg bg-slate-50 p-3 dark:bg-slate-800/60">
74
- <label className="flex items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
75
- <span>
76
- <span className="font-medium text-slate-800 dark:text-slate-200">
77
- {translate('privacy.consent.necessary_label', 'Necessary')}
78
- </span>
79
- <span className="block text-[11px] text-slate-400">
80
- {translate('privacy.consent.necessary_help', 'Always on')}
81
- </span>
82
- </span>
83
- <input
84
- type="checkbox"
85
- checked
86
- disabled
87
- className="h-4 w-4 accent-slate-400"
88
- />
89
- </label>
90
- <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
91
- <span>
92
- <span className="font-medium text-slate-800 dark:text-slate-200">
93
- {translate('privacy.consent.analytics_label', 'Analytics')}
94
- </span>
95
- <span className="block text-[11px] text-slate-400">
96
- {translate(
97
- 'privacy.consent.analytics_help',
98
- 'Usage insights',
99
- )}
100
- </span>
101
- </span>
102
- <input
103
- type="checkbox"
104
- checked={analytics}
105
- onChange={(e) => setAnalytics(e.target.checked)}
106
- className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
107
- />
108
- </label>
109
- <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
110
- <span>
111
- <span className="font-medium text-slate-800 dark:text-slate-200">
112
- {translate('privacy.consent.marketing_label', 'Marketing')}
113
- </span>
114
- <span className="block text-[11px] text-slate-400">
115
- {translate(
116
- 'privacy.consent.marketing_help',
117
- 'Personalized content',
118
- )}
119
- </span>
120
- </span>
121
- <input
122
- type="checkbox"
123
- checked={marketing}
124
- onChange={(e) => setMarketing(e.target.checked)}
125
- className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
126
- />
127
- </label>
128
- </div>
129
- )}
130
-
131
- <div className="mt-3 flex items-center gap-2">
132
- {managing ? (
133
- <button
134
- type="button"
135
- onClick={() => decide({ analytics, marketing })}
136
- className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
137
- >
138
- {translate('privacy.consent.save_choices', 'Save choices')}
139
- </button>
140
- ) : (
141
- <button
142
- type="button"
143
- onClick={() => decide({ analytics: true, marketing: true })}
144
- className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
145
- >
146
- {translate('privacy.consent.accept_all', 'Accept all')}
147
- </button>
148
- )}
149
- <button
150
- type="button"
151
- onClick={() => decide({ analytics: false, marketing: false })}
152
- className="rounded-lg border border-slate-200 px-3 py-2 text-xs font-medium text-slate-600 transition hover:bg-slate-50 dark:border-slate-700 dark:text-slate-300 dark:hover:bg-slate-800"
153
- >
154
- {translate('privacy.consent.reject_all', 'Reject all')}
155
- </button>
156
- </div>
157
-
158
- <button
159
- type="button"
160
- onClick={() => setManaging((prev) => !prev)}
161
- className="mt-2 w-full text-center text-[11px] text-slate-800 underline underline-offset-2 transition hover:text-slate-600 dark:hover:text-slate-300"
162
- >
163
- {managing
164
- ? translate('privacy.consent.hide_options', 'Hide options')
165
- : translate('privacy.consent.manage_options', 'Manage options')}
166
- </button>
167
- </div>
168
- </div>
169
- );
170
- }
1
+ 'use client';
2
+
3
+ import { useEffect, useState } from 'react';
4
+ import Link from 'next/link';
5
+ import { useTranslations } from '@nextblock-cms/utils';
6
+ import { logConsentDecision } from '../../app/actions/consent';
7
+ import { readConsent, writeConsent } from '../../lib/privacy/consent-client';
8
+
9
+ /**
10
+ * Minimal floating consent pill, bottom-right. Renders nothing once a decision
11
+ * exists (the nb_consent_preference cookie). Decisions persist client-side and
12
+ * are mirrored to privacy_consent_logs for accountability.
13
+ */
14
+ export function ConsentBanner() {
15
+ const { lang, t } = useTranslations();
16
+ const [visible, setVisible] = useState(false);
17
+ const [managing, setManaging] = useState(false);
18
+ const [analytics, setAnalytics] = useState(true);
19
+ const [marketing, setMarketing] = useState(false);
20
+ const isFrench = lang.toLowerCase().startsWith('fr');
21
+
22
+ const translate = (key: string, fallback: string) => {
23
+ const translated = t(key);
24
+ return translated === key ? fallback : translated;
25
+ };
26
+
27
+ const privacyPolicyHref = translate(
28
+ 'privacy.consent.privacy_policy_href',
29
+ isFrench ? '/politique-de-confidentialite' : '/privacy-policy',
30
+ );
31
+
32
+ useEffect(() => {
33
+ if (!readConsent()) setVisible(true);
34
+ }, []);
35
+
36
+ const decide = (choice: { analytics: boolean; marketing: boolean }) => {
37
+ const pref = writeConsent(choice);
38
+ void logConsentDecision({
39
+ token: pref.token,
40
+ analytics: choice.analytics,
41
+ marketing: choice.marketing,
42
+ });
43
+ setVisible(false);
44
+ };
45
+
46
+ if (!visible) return null;
47
+
48
+ return (
49
+ <div
50
+ role="dialog"
51
+ aria-label={translate('privacy.consent.aria_label', 'Privacy consent')}
52
+ className="fixed bottom-4 right-4 z-[70] w-[min(92vw,360px)] animate-in fade-in slide-in-from-bottom-2 duration-300"
53
+ >
54
+ <div className="rounded-2xl border border-slate-200/70 bg-white/95 p-4 shadow-[0_8px_30px_rgba(15,23,42,0.12)] backdrop-blur-md dark:border-slate-700/60 dark:bg-slate-900/95 dark:shadow-[0_8px_30px_rgba(0,0,0,0.5)]">
55
+ <p className="text-sm font-medium text-slate-900 dark:text-slate-100">
56
+ {translate('privacy.consent.title', 'We value your privacy')}
57
+ </p>
58
+ <p className="mt-1 text-xs leading-relaxed text-slate-500 dark:text-slate-400">
59
+ {translate(
60
+ 'privacy.consent.description_before_policy_link',
61
+ 'We use only essential cookies by default. With your consent we also use analytics to improve the site. See our',
62
+ )}{' '}
63
+ <Link
64
+ href={privacyPolicyHref}
65
+ className="underline underline-offset-2 hover:text-slate-700 dark:hover:text-slate-200"
66
+ >
67
+ {translate('privacy.consent.privacy_policy_link', 'Privacy Policy')}
68
+ </Link>
69
+ {translate('privacy.consent.description_after_policy_link', '.')}
70
+ </p>
71
+
72
+ {managing && (
73
+ <div className="mt-3 space-y-2 rounded-lg bg-slate-50 p-3 dark:bg-slate-800/60">
74
+ <label className="flex items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
75
+ <span>
76
+ <span className="font-medium text-slate-800 dark:text-slate-200">
77
+ {translate('privacy.consent.necessary_label', 'Necessary')}
78
+ </span>
79
+ <span className="block text-[11px] text-slate-400">
80
+ {translate('privacy.consent.necessary_help', 'Always on')}
81
+ </span>
82
+ </span>
83
+ <input
84
+ type="checkbox"
85
+ checked
86
+ disabled
87
+ className="h-4 w-4 accent-slate-400"
88
+ />
89
+ </label>
90
+ <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
91
+ <span>
92
+ <span className="font-medium text-slate-800 dark:text-slate-200">
93
+ {translate('privacy.consent.analytics_label', 'Analytics')}
94
+ </span>
95
+ <span className="block text-[11px] text-slate-400">
96
+ {translate(
97
+ 'privacy.consent.analytics_help',
98
+ 'Usage insights',
99
+ )}
100
+ </span>
101
+ </span>
102
+ <input
103
+ type="checkbox"
104
+ checked={analytics}
105
+ onChange={(e) => setAnalytics(e.target.checked)}
106
+ className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
107
+ />
108
+ </label>
109
+ <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
110
+ <span>
111
+ <span className="font-medium text-slate-800 dark:text-slate-200">
112
+ {translate('privacy.consent.marketing_label', 'Marketing')}
113
+ </span>
114
+ <span className="block text-[11px] text-slate-400">
115
+ {translate(
116
+ 'privacy.consent.marketing_help',
117
+ 'Personalized content',
118
+ )}
119
+ </span>
120
+ </span>
121
+ <input
122
+ type="checkbox"
123
+ checked={marketing}
124
+ onChange={(e) => setMarketing(e.target.checked)}
125
+ className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
126
+ />
127
+ </label>
128
+ </div>
129
+ )}
130
+
131
+ <div className="mt-3 flex items-center gap-2">
132
+ {managing ? (
133
+ <button
134
+ type="button"
135
+ onClick={() => decide({ analytics, marketing })}
136
+ className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
137
+ >
138
+ {translate('privacy.consent.save_choices', 'Save choices')}
139
+ </button>
140
+ ) : (
141
+ <button
142
+ type="button"
143
+ onClick={() => decide({ analytics: true, marketing: true })}
144
+ className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
145
+ >
146
+ {translate('privacy.consent.accept_all', 'Accept all')}
147
+ </button>
148
+ )}
149
+ <button
150
+ type="button"
151
+ onClick={() => decide({ analytics: false, marketing: false })}
152
+ className="rounded-lg border border-slate-200 px-3 py-2 text-xs font-medium text-slate-600 transition hover:bg-slate-50 dark:border-slate-700 dark:text-slate-300 dark:hover:bg-slate-800"
153
+ >
154
+ {translate('privacy.consent.reject_all', 'Reject all')}
155
+ </button>
156
+ </div>
157
+
158
+ <button
159
+ type="button"
160
+ onClick={() => setManaging((prev) => !prev)}
161
+ className="mt-2 w-full text-center text-[11px] text-slate-800 underline underline-offset-2 transition hover:text-slate-600 dark:hover:text-slate-300"
162
+ >
163
+ {managing
164
+ ? translate('privacy.consent.hide_options', 'Hide options')
165
+ : translate('privacy.consent.manage_options', 'Manage options')}
166
+ </button>
167
+ </div>
168
+ </div>
169
+ );
170
+ }