create-nextblock 0.16.4 → 0.17.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (196) hide show
  1. package/CLAUDE.md +22 -0
  2. package/docker-template/.env.docker.example +69 -69
  3. package/docker-template/docker/db/init/99-jwt.sql +6 -6
  4. package/docker-template/docker/db/init/99-roles.sql +25 -25
  5. package/docker-template/docker/kong/kong.yml +112 -112
  6. package/docker-template/scripts/docker-setup.mjs +310 -310
  7. package/package.json +1 -1
  8. package/templates/nextblock-template/.browserslistrc +11 -11
  9. package/templates/nextblock-template/.swcrc +30 -30
  10. package/templates/nextblock-template/CLAUDE.md +26 -0
  11. package/templates/nextblock-template/app/(auth-pages)/sign-up/page.tsx +46 -46
  12. package/templates/nextblock-template/app/(auth-pages)/two-factor/page.tsx +51 -51
  13. package/templates/nextblock-template/app/.well-known/ucp/route.ts +16 -16
  14. package/templates/nextblock-template/app/actions/consent.ts +57 -57
  15. package/templates/nextblock-template/app/actions/twoFactorEmail.ts +22 -22
  16. package/templates/nextblock-template/app/api/ai/cortex/build-widget/route.ts +153 -153
  17. package/templates/nextblock-template/app/api/ai/generate-blocks/route.ts +96 -96
  18. package/templates/nextblock-template/app/api/brand/email-logo/route.ts +48 -48
  19. package/templates/nextblock-template/app/api/checkout/freemius/sync/route.ts +29 -29
  20. package/templates/nextblock-template/app/api/cms/check-updates/route.ts +44 -44
  21. package/templates/nextblock-template/app/api/cms/full-backup/export/route.ts +33 -33
  22. package/templates/nextblock-template/app/api/cms/full-backup/restore/route.ts +63 -63
  23. package/templates/nextblock-template/app/api/cron/reset-sandbox/route.ts +270 -205
  24. package/templates/nextblock-template/app/api/cron/reset-sandbox/sandboxResetSql.ts +8096 -7198
  25. package/templates/nextblock-template/app/api/cron/sync-currencies/route.ts +39 -39
  26. package/templates/nextblock-template/app/api/custom-blocks/db-relations/route.ts +92 -92
  27. package/templates/nextblock-template/app/api/custom-blocks/editor-definitions/route.ts +43 -43
  28. package/templates/nextblock-template/app/api/media/library/route.ts +69 -69
  29. package/templates/nextblock-template/app/api/media/r2-presigned/route.ts +53 -53
  30. package/templates/nextblock-template/app/api/visual-editing/block-draft/route.ts +47 -47
  31. package/templates/nextblock-template/app/api/visual-editing/product-draft/route.ts +47 -47
  32. package/templates/nextblock-template/app/article/[slug]/PostClientContent.tsx +442 -441
  33. package/templates/nextblock-template/app/article/[slug]/page.utils.ts +4 -1
  34. package/templates/nextblock-template/app/checkout/UcpCartHydrator.tsx +20 -20
  35. package/templates/nextblock-template/app/cms/blocks/components/BlockEditorModal.tsx +241 -241
  36. package/templates/nextblock-template/app/cms/blocks/components/CustomBlockEditorPreview.tsx +160 -160
  37. package/templates/nextblock-template/app/cms/blocks/editors/DynamicCustomBlockEditor.tsx +167 -167
  38. package/templates/nextblock-template/app/cms/components/ConnectGitHubButton.tsx +122 -122
  39. package/templates/nextblock-template/app/cms/components/CortexAiActiveContext.tsx +23 -23
  40. package/templates/nextblock-template/app/cms/components/SeoScoreBadge.tsx +3 -3
  41. package/templates/nextblock-template/app/cms/components/SystemAlertsBanner.tsx +112 -112
  42. package/templates/nextblock-template/app/cms/components/TablePagination.tsx +136 -136
  43. package/templates/nextblock-template/app/cms/components/TwoFactorReminderBanner.tsx +45 -45
  44. package/templates/nextblock-template/app/cms/components/github-connect-actions.ts +102 -102
  45. package/templates/nextblock-template/app/cms/components/system-alerts-actions.ts +31 -31
  46. package/templates/nextblock-template/app/cms/coupons/[id]/edit/page.tsx +16 -16
  47. package/templates/nextblock-template/app/cms/coupons/page.tsx +16 -16
  48. package/templates/nextblock-template/app/cms/custom-blocks/[id]/edit/page.tsx +66 -66
  49. package/templates/nextblock-template/app/cms/custom-blocks/actions.ts +519 -519
  50. package/templates/nextblock-template/app/cms/custom-blocks/components/BlocksLibraryTransferControls.tsx +256 -256
  51. package/templates/nextblock-template/app/cms/custom-blocks/components/DBRelationSelect.tsx +384 -384
  52. package/templates/nextblock-template/app/cms/custom-blocks/components/ImageR2Picker.tsx +221 -221
  53. package/templates/nextblock-template/app/cms/custom-blocks/new/page.tsx +12 -12
  54. package/templates/nextblock-template/app/cms/custom-blocks/page.tsx +438 -438
  55. package/templates/nextblock-template/app/cms/dashboard/components/DashboardComponents.tsx +200 -200
  56. package/templates/nextblock-template/app/cms/dashboard/components/DashboardOnboarding.tsx +130 -130
  57. package/templates/nextblock-template/app/cms/import-export/actions.ts +226 -226
  58. package/templates/nextblock-template/app/cms/pages/page.tsx +273 -273
  59. package/templates/nextblock-template/app/cms/posts/page.tsx +251 -251
  60. package/templates/nextblock-template/app/cms/products/categories/page.tsx +12 -12
  61. package/templates/nextblock-template/app/cms/products/new/page.tsx +135 -135
  62. package/templates/nextblock-template/app/cms/promotions/PromotionsWorkspace.tsx +456 -456
  63. package/templates/nextblock-template/app/cms/promotions/actions.ts +115 -115
  64. package/templates/nextblock-template/app/cms/promotions/page.tsx +31 -31
  65. package/templates/nextblock-template/app/cms/settings/backup-restore/BackupRestoreWorkspace.tsx +1004 -1004
  66. package/templates/nextblock-template/app/cms/settings/backup-restore/page.tsx +29 -29
  67. package/templates/nextblock-template/app/cms/settings/bot-protection/page.tsx +24 -24
  68. package/templates/nextblock-template/app/cms/settings/email/page.tsx +28 -28
  69. package/templates/nextblock-template/app/cms/settings/extra-translations/actions.ts +276 -276
  70. package/templates/nextblock-template/app/cms/settings/google-analytics/page.tsx +26 -26
  71. package/templates/nextblock-template/app/cms/settings/logos/components/DeleteLogoButton.tsx +21 -21
  72. package/templates/nextblock-template/app/cms/settings/logos/components/SetActiveLogoButton.tsx +42 -42
  73. package/templates/nextblock-template/app/cms/settings/logos/components/SiteSeoSettingsForm.tsx +133 -133
  74. package/templates/nextblock-template/app/cms/settings/privacy/page.tsx +27 -27
  75. package/templates/nextblock-template/app/cms/settings/registration/page.tsx +27 -27
  76. package/templates/nextblock-template/app/cms/settings/security/page.tsx +33 -33
  77. package/templates/nextblock-template/app/lib/site-settings.ts +105 -105
  78. package/templates/nextblock-template/app/lib/ucp/protocol.ts +190 -190
  79. package/templates/nextblock-template/app/lib/ucp/server.test.ts +56 -56
  80. package/templates/nextblock-template/app/setup/SetupWizard.tsx +678 -678
  81. package/templates/nextblock-template/app/setup/layout.tsx +13 -13
  82. package/templates/nextblock-template/app/setup/page.tsx +111 -111
  83. package/templates/nextblock-template/app/ucp/v1/carts/[id]/cancel/route.ts +38 -38
  84. package/templates/nextblock-template/app/ucp/v1/carts/[id]/route.ts +68 -68
  85. package/templates/nextblock-template/app/ucp/v1/carts/route.ts +35 -35
  86. package/templates/nextblock-template/app/ucp/v1/catalog/lookup/route.ts +35 -35
  87. package/templates/nextblock-template/app/ucp/v1/catalog/product/route.ts +35 -35
  88. package/templates/nextblock-template/app/ucp/v1/catalog/search/route.ts +34 -34
  89. package/templates/nextblock-template/components/CartTranslator.tsx +210 -210
  90. package/templates/nextblock-template/components/DeferredCartTranslator.tsx +51 -51
  91. package/templates/nextblock-template/components/DeferredGlobalSearch.tsx +68 -68
  92. package/templates/nextblock-template/components/DeferredGoogleAnalytics.tsx +70 -70
  93. package/templates/nextblock-template/components/FeatureImageHero.tsx +47 -47
  94. package/templates/nextblock-template/components/GlobalSearch.tsx +557 -557
  95. package/templates/nextblock-template/components/Header.tsx +38 -38
  96. package/templates/nextblock-template/components/PublicEnvBootstrap.tsx +30 -30
  97. package/templates/nextblock-template/components/ResponsiveNav.tsx +14 -14
  98. package/templates/nextblock-template/components/auth/AuthBotProtection.tsx +182 -182
  99. package/templates/nextblock-template/components/blocks/PostsGridClient.tsx +48 -48
  100. package/templates/nextblock-template/components/blocks/TestimonialBlock.tsx +9 -9
  101. package/templates/nextblock-template/components/blocks/publicRendererLoaders.ts +25 -25
  102. package/templates/nextblock-template/components/blocks/renderers/ButtonBlockRenderer.tsx +92 -92
  103. package/templates/nextblock-template/components/blocks/renderers/ClientTextBlockRenderer.tsx +11 -0
  104. package/templates/nextblock-template/components/blocks/renderers/PostsGridBlockRenderer.tsx +24 -24
  105. package/templates/nextblock-template/components/blocks/renderers/TestimonialBlockRenderer.tsx +57 -57
  106. package/templates/nextblock-template/components/blocks/renderers/inline/AlertWidgetRenderer.tsx +2 -2
  107. package/templates/nextblock-template/components/blocks/renderers/inline/CtaWidgetRenderer.tsx +2 -2
  108. package/templates/nextblock-template/components/media/YouTubeFacade.tsx +105 -105
  109. package/templates/nextblock-template/components/media/youtube-embed-replace.tsx +32 -32
  110. package/templates/nextblock-template/components/privacy/ConsentBanner.tsx +170 -170
  111. package/templates/nextblock-template/components/privacy/ConsentGatedAnalytics.tsx +70 -70
  112. package/templates/nextblock-template/components/renderers/CachedDynamicLayoutEngine.tsx +28 -28
  113. package/templates/nextblock-template/components/renderers/DynamicLayoutEngine.test.tsx +166 -166
  114. package/templates/nextblock-template/components/renderers/DynamicLayoutEngine.tsx +471 -471
  115. package/templates/nextblock-template/components/visual-editing/DeferredVisualEditing.tsx +21 -21
  116. package/templates/nextblock-template/context/language-rest-client.ts +32 -32
  117. package/templates/nextblock-template/docker/db/init/99-jwt.sql +6 -6
  118. package/templates/nextblock-template/docker/db/init/99-roles.sql +25 -25
  119. package/templates/nextblock-template/docker/kong/kong.yml +112 -112
  120. package/templates/nextblock-template/docs/02-ECOMMERCE-CAPABILITIES.md +364 -364
  121. package/templates/nextblock-template/docs/04-DATABASE-AND-AUTH.md +11 -0
  122. package/templates/nextblock-template/docs/07-BLOCK-SDK-AND-EXTENSIBILITY.md +146 -146
  123. package/templates/nextblock-template/docs/08-NEXTBLOCK-CORTEX-AI-ARCHITECTURE.md +19 -0
  124. package/templates/nextblock-template/docs/10-CUSTOM-BLOCKS.md +222 -222
  125. package/templates/nextblock-template/lib/app-secrets.ts +39 -39
  126. package/templates/nextblock-template/lib/auth/cookies.ts +47 -47
  127. package/templates/nextblock-template/lib/auth/crypto.ts +45 -45
  128. package/templates/nextblock-template/lib/auth/trustedDevices.ts +92 -92
  129. package/templates/nextblock-template/lib/blocks/README.md +13 -13
  130. package/templates/nextblock-template/lib/botProtection/verify.ts +134 -134
  131. package/templates/nextblock-template/lib/cms/payments-reminder.test.ts +135 -135
  132. package/templates/nextblock-template/lib/cms/payments-reminder.ts +105 -105
  133. package/templates/nextblock-template/lib/cms-transfer/types.ts +145 -145
  134. package/templates/nextblock-template/lib/custom-block-definitions.ts +87 -87
  135. package/templates/nextblock-template/lib/custom-block-r2-upload-shared.ts +178 -178
  136. package/templates/nextblock-template/lib/custom-block-r2-upload.test.ts +140 -140
  137. package/templates/nextblock-template/lib/custom-block-r2-upload.ts +88 -88
  138. package/templates/nextblock-template/lib/custom-block-relations.test.ts +227 -227
  139. package/templates/nextblock-template/lib/custom-block-relations.ts +279 -279
  140. package/templates/nextblock-template/lib/custom-block-safelist.ts +14 -14
  141. package/templates/nextblock-template/lib/editor/dynamic-extension-core.test.ts +172 -172
  142. package/templates/nextblock-template/lib/editor/dynamic-extension-core.ts +213 -213
  143. package/templates/nextblock-template/lib/editor/dynamic-extension-loader.ts +22 -22
  144. package/templates/nextblock-template/lib/editor/dynamic-extensions.tsx +193 -193
  145. package/templates/nextblock-template/lib/email/branding-format.test.ts +133 -133
  146. package/templates/nextblock-template/lib/email/branding-format.ts +123 -123
  147. package/templates/nextblock-template/lib/email/branding.ts +76 -76
  148. package/templates/nextblock-template/lib/full-backup/manifest.test.ts +121 -121
  149. package/templates/nextblock-template/lib/full-backup/manifest.ts +206 -206
  150. package/templates/nextblock-template/lib/logos/active-logo.ts +53 -53
  151. package/templates/nextblock-template/lib/media/resolveMediaUrl.ts +56 -54
  152. package/templates/nextblock-template/lib/media/youtube.ts +99 -99
  153. package/templates/nextblock-template/lib/onboarding/actions.ts +31 -31
  154. package/templates/nextblock-template/lib/privacy/consent-client.ts +57 -57
  155. package/templates/nextblock-template/lib/privacy/contact-emails.ts +64 -64
  156. package/templates/nextblock-template/lib/privacy/settings.ts +115 -115
  157. package/templates/nextblock-template/lib/privacy/types.ts +69 -69
  158. package/templates/nextblock-template/lib/promotions/server.test.ts +74 -74
  159. package/templates/nextblock-template/lib/promotions/server.ts +741 -741
  160. package/templates/nextblock-template/lib/resolve-block-relations.test.ts +142 -142
  161. package/templates/nextblock-template/lib/resolve-block-relations.ts +255 -255
  162. package/templates/nextblock-template/lib/seo/page-document.ts +4 -4
  163. package/templates/nextblock-template/lib/setup/actions.ts +460 -460
  164. package/templates/nextblock-template/lib/setup/env-status.ts +125 -125
  165. package/templates/nextblock-template/lib/setup/env-write.ts +111 -111
  166. package/templates/nextblock-template/lib/setup/migrations-bundle.ts +42 -12
  167. package/templates/nextblock-template/lib/setup/provisioning.ts +59 -59
  168. package/templates/nextblock-template/lib/setup/schema-apply.ts +408 -408
  169. package/templates/nextblock-template/lib/setup/system-config.ts +105 -105
  170. package/templates/nextblock-template/lib/setup/types.ts +18 -18
  171. package/templates/nextblock-template/lib/storage/provider.ts +66 -66
  172. package/templates/nextblock-template/lib/storage/supabase-storage.ts +103 -103
  173. package/templates/nextblock-template/lib/updates/github-device.ts +206 -206
  174. package/templates/nextblock-template/lib/updates/repo-identity.ts +56 -56
  175. package/templates/nextblock-template/lib/visual-editing/draft-content.test.ts +105 -105
  176. package/templates/nextblock-template/lib/visual-editing/draft-route.test.ts +42 -42
  177. package/templates/nextblock-template/lib/visual-editing/edit-info.test.ts +143 -143
  178. package/templates/nextblock-template/lib/visual-editing/edit-info.ts +94 -94
  179. package/templates/nextblock-template/lib/visual-editing/product-drafts.test.ts +81 -81
  180. package/templates/nextblock-template/lib/zod-config.ts +5 -5
  181. package/templates/nextblock-template/next-env.d.ts +1 -0
  182. package/templates/nextblock-template/package.json +1 -1
  183. package/templates/nextblock-template/public/images/cortex_post.webp +0 -0
  184. package/templates/nextblock-template/public/images/update_nextblock.webp +0 -0
  185. package/templates/nextblock-template/scripts/docker-setup.mjs +310 -310
  186. package/templates/nextblock-template/scripts/validate-editor-block-schema.ts +112 -112
  187. package/templates/nextblock-template/scripts/verify-cortex-ai-build-widget.tsx +98 -98
  188. package/templates/nextblock-template/scripts/verify-cortex-ai-generate-blocks.ts +62 -62
  189. package/templates/nextblock-template/scripts/verify-cortex-ai-global-tools.ts +537 -537
  190. package/templates/nextblock-template/scripts/verify-cortex-ai-routing.ts +58 -58
  191. package/templates/nextblock-template/scripts/verify-custom-block-definitions.ts +188 -188
  192. package/templates/nextblock-template/scripts/verify-dynamic-custom-block-extensions.ts +123 -123
  193. package/templates/nextblock-template/scripts/verify-dynamic-layout-engine.tsx +133 -133
  194. package/templates/nextblock-template/scripts/verify-milestone-2-custom-blocks.ts +65 -65
  195. package/templates/nextblock-template/tools/deploy-supabase.js +159 -159
  196. package/templates/nextblock-template/types/jsdom.d.ts +6 -6
@@ -1,105 +1,105 @@
1
- 'use client';
2
-
3
- import React, { useState } from 'react';
4
- import Image from 'next/image';
5
- import {
6
- buildNoCookieEmbedUrl,
7
- youTubePosterUrl,
8
- YOUTUBE_POSTER_DIMENSIONS,
9
- type YouTubePosterQuality,
10
- } from '../../lib/media/youtube';
11
-
12
- interface YouTubeFacadeProps {
13
- videoId: string;
14
- title?: string;
15
- /** Serialized extra player params (from parseYouTubeUrl). */
16
- query?: string;
17
- /** Classes for the clickable surface / injected iframe. Defaults to filling its parent. */
18
- className?: string;
19
- /**
20
- * Above-the-fold embeds. The poster is very often the page's LCP element, so
21
- * this preloads it, marks it fetchpriority=high and drops lazy-loading.
22
- */
23
- priority?: boolean;
24
- /** Responsive-srcset layout hint; override when the embed is not ~half-width. */
25
- sizes?: string;
26
- }
27
-
28
- const FILL = 'absolute inset-0 h-full w-full';
29
- // The video block is content-width, so it is full-bleed on phones and roughly a
30
- // column wide on desktop. Callers that know better pass their own `sizes`.
31
- const DEFAULT_SIZES = '(max-width: 768px) 100vw, 50vw';
32
-
33
- /**
34
- * Click-to-play YouTube facade: renders a poster + play button and loads no
35
- * youtube.com resource at all until the user clicks. This is what keeps the
36
- * Lighthouse `inspector-issues` audit green -- the nocookie host still writes
37
- * cookies from the player JS, so the only reliable fix is not booting the
38
- * player during the audit. See lib/media/youtube.ts.
39
- */
40
- const YouTubeFacade: React.FC<YouTubeFacadeProps> = ({
41
- videoId,
42
- title,
43
- query,
44
- className,
45
- priority = false,
46
- sizes,
47
- }) => {
48
- const [activated, setActivated] = useState(false);
49
- const [posterQuality, setPosterQuality] = useState<YouTubePosterQuality>('maxres');
50
- const label = title || 'YouTube video';
51
- const surface = className || FILL;
52
- const poster = youTubePosterUrl(videoId, posterQuality);
53
- const posterSize = YOUTUBE_POSTER_DIMENSIONS[posterQuality];
54
-
55
- if (activated) {
56
- return (
57
- <iframe
58
- className={surface}
59
- src={buildNoCookieEmbedUrl(videoId, new URLSearchParams(query || ''), { autoplay: true })}
60
- title={label}
61
- allow="autoplay; accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
62
- referrerPolicy="strict-origin-when-cross-origin"
63
- allowFullScreen
64
- />
65
- );
66
- }
67
-
68
- return (
69
- <button
70
- type="button"
71
- onClick={() => setActivated(true)}
72
- aria-label={`Play video: ${label}`}
73
- className={`${surface} group flex items-center justify-center overflow-hidden border-0 bg-black p-0`}
74
- >
75
- {/* Routed through next/image on purpose: i.ytimg.com serves the poster as a
76
- full-size JPEG with a 2h cache TTL, which made a ~205 KiB download the LCP
77
- for a thumbnail-sized slot. The optimizer re-encodes to AVIF/WebP at the
78
- displayed width and serves it same-origin under the app's long cache TTL. */}
79
- <Image
80
- src={poster}
81
- alt=""
82
- aria-hidden="true"
83
- width={posterSize.width}
84
- height={posterSize.height}
85
- sizes={sizes || DEFAULT_SIZES}
86
- quality={60}
87
- priority={priority}
88
- fetchPriority={priority ? 'high' : undefined}
89
- loading={priority ? undefined : 'lazy'}
90
- decoding="async"
91
- // maxresdefault.jpg is not uploaded for every video; fall back to the
92
- // hqdefault variant, which always exists.
93
- onError={() => setPosterQuality((current) => (current === 'maxres' ? 'hq' : current))}
94
- className="absolute inset-0 h-full w-full object-cover opacity-90 transition group-hover:opacity-100"
95
- />
96
- <span className="relative flex h-16 w-16 items-center justify-center rounded-full bg-black/70 text-white shadow-lg transition group-hover:scale-110 group-hover:bg-red-600">
97
- <svg viewBox="0 0 24 24" className="ml-1 h-7 w-7" aria-hidden="true" focusable="false">
98
- <path d="M8 5v14l11-7z" fill="currentColor" />
99
- </svg>
100
- </span>
101
- </button>
102
- );
103
- };
104
-
105
- export default YouTubeFacade;
1
+ 'use client';
2
+
3
+ import React, { useState } from 'react';
4
+ import Image from 'next/image';
5
+ import {
6
+ buildNoCookieEmbedUrl,
7
+ youTubePosterUrl,
8
+ YOUTUBE_POSTER_DIMENSIONS,
9
+ type YouTubePosterQuality,
10
+ } from '../../lib/media/youtube';
11
+
12
+ interface YouTubeFacadeProps {
13
+ videoId: string;
14
+ title?: string;
15
+ /** Serialized extra player params (from parseYouTubeUrl). */
16
+ query?: string;
17
+ /** Classes for the clickable surface / injected iframe. Defaults to filling its parent. */
18
+ className?: string;
19
+ /**
20
+ * Above-the-fold embeds. The poster is very often the page's LCP element, so
21
+ * this preloads it, marks it fetchpriority=high and drops lazy-loading.
22
+ */
23
+ priority?: boolean;
24
+ /** Responsive-srcset layout hint; override when the embed is not ~half-width. */
25
+ sizes?: string;
26
+ }
27
+
28
+ const FILL = 'absolute inset-0 h-full w-full';
29
+ // The video block is content-width, so it is full-bleed on phones and roughly a
30
+ // column wide on desktop. Callers that know better pass their own `sizes`.
31
+ const DEFAULT_SIZES = '(max-width: 768px) 100vw, 50vw';
32
+
33
+ /**
34
+ * Click-to-play YouTube facade: renders a poster + play button and loads no
35
+ * youtube.com resource at all until the user clicks. This is what keeps the
36
+ * Lighthouse `inspector-issues` audit green -- the nocookie host still writes
37
+ * cookies from the player JS, so the only reliable fix is not booting the
38
+ * player during the audit. See lib/media/youtube.ts.
39
+ */
40
+ const YouTubeFacade: React.FC<YouTubeFacadeProps> = ({
41
+ videoId,
42
+ title,
43
+ query,
44
+ className,
45
+ priority = false,
46
+ sizes,
47
+ }) => {
48
+ const [activated, setActivated] = useState(false);
49
+ const [posterQuality, setPosterQuality] = useState<YouTubePosterQuality>('maxres');
50
+ const label = title || 'YouTube video';
51
+ const surface = className || FILL;
52
+ const poster = youTubePosterUrl(videoId, posterQuality);
53
+ const posterSize = YOUTUBE_POSTER_DIMENSIONS[posterQuality];
54
+
55
+ if (activated) {
56
+ return (
57
+ <iframe
58
+ className={surface}
59
+ src={buildNoCookieEmbedUrl(videoId, new URLSearchParams(query || ''), { autoplay: true })}
60
+ title={label}
61
+ allow="autoplay; accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
62
+ referrerPolicy="strict-origin-when-cross-origin"
63
+ allowFullScreen
64
+ />
65
+ );
66
+ }
67
+
68
+ return (
69
+ <button
70
+ type="button"
71
+ onClick={() => setActivated(true)}
72
+ aria-label={`Play video: ${label}`}
73
+ className={`${surface} group flex items-center justify-center overflow-hidden border-0 bg-black p-0`}
74
+ >
75
+ {/* Routed through next/image on purpose: i.ytimg.com serves the poster as a
76
+ full-size JPEG with a 2h cache TTL, which made a ~205 KiB download the LCP
77
+ for a thumbnail-sized slot. The optimizer re-encodes to AVIF/WebP at the
78
+ displayed width and serves it same-origin under the app's long cache TTL. */}
79
+ <Image
80
+ src={poster}
81
+ alt=""
82
+ aria-hidden="true"
83
+ width={posterSize.width}
84
+ height={posterSize.height}
85
+ sizes={sizes || DEFAULT_SIZES}
86
+ quality={60}
87
+ priority={priority}
88
+ fetchPriority={priority ? 'high' : undefined}
89
+ loading={priority ? undefined : 'lazy'}
90
+ decoding="async"
91
+ // maxresdefault.jpg is not uploaded for every video; fall back to the
92
+ // hqdefault variant, which always exists.
93
+ onError={() => setPosterQuality((current) => (current === 'maxres' ? 'hq' : current))}
94
+ className="absolute inset-0 h-full w-full object-cover opacity-90 transition group-hover:opacity-100"
95
+ />
96
+ <span className="relative flex h-16 w-16 items-center justify-center rounded-full bg-black/70 text-white shadow-lg transition group-hover:scale-110 group-hover:bg-red-600">
97
+ <svg viewBox="0 0 24 24" className="ml-1 h-7 w-7" aria-hidden="true" focusable="false">
98
+ <path d="M8 5v14l11-7z" fill="currentColor" />
99
+ </svg>
100
+ </span>
101
+ </button>
102
+ );
103
+ };
104
+
105
+ export default YouTubeFacade;
@@ -1,32 +1,32 @@
1
- import React from 'react';
2
- import { Element, type HTMLReactParserOptions } from 'html-react-parser';
3
- import YouTubeFacade from './YouTubeFacade';
4
- import { parseYouTubeUrl } from '../../lib/media/youtube';
5
-
6
- /**
7
- * html-react-parser `replace` helper: swaps any YouTube <iframe> for a
8
- * click-to-play facade (zero third-party requests on load) and forces
9
- * loading="lazy" on every other third-party frame.
10
- * Returns undefined to let the parser render the node normally.
11
- */
12
- export function replaceYouTubeIframe(domNode: Element): React.ReactElement | undefined {
13
- if (domNode.name !== 'iframe' || !domNode.attribs) return undefined;
14
- const parsed = parseYouTubeUrl(domNode.attribs.src);
15
- if (!parsed) {
16
- if (!domNode.attribs.loading) domNode.attribs.loading = 'lazy';
17
- return undefined;
18
- }
19
- return (
20
- <YouTubeFacade
21
- videoId={parsed.videoId}
22
- title={domNode.attribs.title}
23
- query={parsed.params.toString()}
24
- className={domNode.attribs.class}
25
- />
26
- );
27
- }
28
-
29
- /** Minimal parser options for raw-HTML surfaces that only need embed safety. */
30
- export const embedSafeParserOptions: HTMLReactParserOptions = {
31
- replace: (domNode) => (domNode instanceof Element ? replaceYouTubeIframe(domNode) : undefined),
32
- };
1
+ import React from 'react';
2
+ import { Element, type HTMLReactParserOptions } from 'html-react-parser';
3
+ import YouTubeFacade from './YouTubeFacade';
4
+ import { parseYouTubeUrl } from '../../lib/media/youtube';
5
+
6
+ /**
7
+ * html-react-parser `replace` helper: swaps any YouTube <iframe> for a
8
+ * click-to-play facade (zero third-party requests on load) and forces
9
+ * loading="lazy" on every other third-party frame.
10
+ * Returns undefined to let the parser render the node normally.
11
+ */
12
+ export function replaceYouTubeIframe(domNode: Element): React.ReactElement | undefined {
13
+ if (domNode.name !== 'iframe' || !domNode.attribs) return undefined;
14
+ const parsed = parseYouTubeUrl(domNode.attribs.src);
15
+ if (!parsed) {
16
+ if (!domNode.attribs.loading) domNode.attribs.loading = 'lazy';
17
+ return undefined;
18
+ }
19
+ return (
20
+ <YouTubeFacade
21
+ videoId={parsed.videoId}
22
+ title={domNode.attribs.title}
23
+ query={parsed.params.toString()}
24
+ className={domNode.attribs.class}
25
+ />
26
+ );
27
+ }
28
+
29
+ /** Minimal parser options for raw-HTML surfaces that only need embed safety. */
30
+ export const embedSafeParserOptions: HTMLReactParserOptions = {
31
+ replace: (domNode) => (domNode instanceof Element ? replaceYouTubeIframe(domNode) : undefined),
32
+ };
@@ -1,170 +1,170 @@
1
- 'use client';
2
-
3
- import { useEffect, useState } from 'react';
4
- import Link from 'next/link';
5
- import { useTranslations } from '@nextblock-cms/utils';
6
- import { logConsentDecision } from '../../app/actions/consent';
7
- import { readConsent, writeConsent } from '../../lib/privacy/consent-client';
8
-
9
- /**
10
- * Minimal floating consent pill, bottom-right. Renders nothing once a decision
11
- * exists (the nb_consent_preference cookie). Decisions persist client-side and
12
- * are mirrored to privacy_consent_logs for accountability.
13
- */
14
- export function ConsentBanner() {
15
- const { lang, t } = useTranslations();
16
- const [visible, setVisible] = useState(false);
17
- const [managing, setManaging] = useState(false);
18
- const [analytics, setAnalytics] = useState(true);
19
- const [marketing, setMarketing] = useState(false);
20
- const isFrench = lang.toLowerCase().startsWith('fr');
21
-
22
- const translate = (key: string, fallback: string) => {
23
- const translated = t(key);
24
- return translated === key ? fallback : translated;
25
- };
26
-
27
- const privacyPolicyHref = translate(
28
- 'privacy.consent.privacy_policy_href',
29
- isFrench ? '/politique-de-confidentialite' : '/privacy-policy',
30
- );
31
-
32
- useEffect(() => {
33
- if (!readConsent()) setVisible(true);
34
- }, []);
35
-
36
- const decide = (choice: { analytics: boolean; marketing: boolean }) => {
37
- const pref = writeConsent(choice);
38
- void logConsentDecision({
39
- token: pref.token,
40
- analytics: choice.analytics,
41
- marketing: choice.marketing,
42
- });
43
- setVisible(false);
44
- };
45
-
46
- if (!visible) return null;
47
-
48
- return (
49
- <div
50
- role="dialog"
51
- aria-label={translate('privacy.consent.aria_label', 'Privacy consent')}
52
- className="fixed bottom-4 right-4 z-[70] w-[min(92vw,360px)] animate-in fade-in slide-in-from-bottom-2 duration-300"
53
- >
54
- <div className="rounded-2xl border border-slate-200/70 bg-white/95 p-4 shadow-[0_8px_30px_rgba(15,23,42,0.12)] backdrop-blur-md dark:border-slate-700/60 dark:bg-slate-900/95 dark:shadow-[0_8px_30px_rgba(0,0,0,0.5)]">
55
- <p className="text-sm font-medium text-slate-900 dark:text-slate-100">
56
- {translate('privacy.consent.title', 'We value your privacy')}
57
- </p>
58
- <p className="mt-1 text-xs leading-relaxed text-slate-500 dark:text-slate-400">
59
- {translate(
60
- 'privacy.consent.description_before_policy_link',
61
- 'We use only essential cookies by default. With your consent we also use analytics to improve the site. See our',
62
- )}{' '}
63
- <Link
64
- href={privacyPolicyHref}
65
- className="underline underline-offset-2 hover:text-slate-700 dark:hover:text-slate-200"
66
- >
67
- {translate('privacy.consent.privacy_policy_link', 'Privacy Policy')}
68
- </Link>
69
- {translate('privacy.consent.description_after_policy_link', '.')}
70
- </p>
71
-
72
- {managing && (
73
- <div className="mt-3 space-y-2 rounded-lg bg-slate-50 p-3 dark:bg-slate-800/60">
74
- <label className="flex items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
75
- <span>
76
- <span className="font-medium text-slate-800 dark:text-slate-200">
77
- {translate('privacy.consent.necessary_label', 'Necessary')}
78
- </span>
79
- <span className="block text-[11px] text-slate-400">
80
- {translate('privacy.consent.necessary_help', 'Always on')}
81
- </span>
82
- </span>
83
- <input
84
- type="checkbox"
85
- checked
86
- disabled
87
- className="h-4 w-4 accent-slate-400"
88
- />
89
- </label>
90
- <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
91
- <span>
92
- <span className="font-medium text-slate-800 dark:text-slate-200">
93
- {translate('privacy.consent.analytics_label', 'Analytics')}
94
- </span>
95
- <span className="block text-[11px] text-slate-400">
96
- {translate(
97
- 'privacy.consent.analytics_help',
98
- 'Usage insights',
99
- )}
100
- </span>
101
- </span>
102
- <input
103
- type="checkbox"
104
- checked={analytics}
105
- onChange={(e) => setAnalytics(e.target.checked)}
106
- className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
107
- />
108
- </label>
109
- <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
110
- <span>
111
- <span className="font-medium text-slate-800 dark:text-slate-200">
112
- {translate('privacy.consent.marketing_label', 'Marketing')}
113
- </span>
114
- <span className="block text-[11px] text-slate-400">
115
- {translate(
116
- 'privacy.consent.marketing_help',
117
- 'Personalized content',
118
- )}
119
- </span>
120
- </span>
121
- <input
122
- type="checkbox"
123
- checked={marketing}
124
- onChange={(e) => setMarketing(e.target.checked)}
125
- className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
126
- />
127
- </label>
128
- </div>
129
- )}
130
-
131
- <div className="mt-3 flex items-center gap-2">
132
- {managing ? (
133
- <button
134
- type="button"
135
- onClick={() => decide({ analytics, marketing })}
136
- className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
137
- >
138
- {translate('privacy.consent.save_choices', 'Save choices')}
139
- </button>
140
- ) : (
141
- <button
142
- type="button"
143
- onClick={() => decide({ analytics: true, marketing: true })}
144
- className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
145
- >
146
- {translate('privacy.consent.accept_all', 'Accept all')}
147
- </button>
148
- )}
149
- <button
150
- type="button"
151
- onClick={() => decide({ analytics: false, marketing: false })}
152
- className="rounded-lg border border-slate-200 px-3 py-2 text-xs font-medium text-slate-600 transition hover:bg-slate-50 dark:border-slate-700 dark:text-slate-300 dark:hover:bg-slate-800"
153
- >
154
- {translate('privacy.consent.reject_all', 'Reject all')}
155
- </button>
156
- </div>
157
-
158
- <button
159
- type="button"
160
- onClick={() => setManaging((prev) => !prev)}
161
- className="mt-2 w-full text-center text-[11px] text-slate-800 underline underline-offset-2 transition hover:text-slate-600 dark:hover:text-slate-300"
162
- >
163
- {managing
164
- ? translate('privacy.consent.hide_options', 'Hide options')
165
- : translate('privacy.consent.manage_options', 'Manage options')}
166
- </button>
167
- </div>
168
- </div>
169
- );
170
- }
1
+ 'use client';
2
+
3
+ import { useEffect, useState } from 'react';
4
+ import Link from 'next/link';
5
+ import { useTranslations } from '@nextblock-cms/utils';
6
+ import { logConsentDecision } from '../../app/actions/consent';
7
+ import { readConsent, writeConsent } from '../../lib/privacy/consent-client';
8
+
9
+ /**
10
+ * Minimal floating consent pill, bottom-right. Renders nothing once a decision
11
+ * exists (the nb_consent_preference cookie). Decisions persist client-side and
12
+ * are mirrored to privacy_consent_logs for accountability.
13
+ */
14
+ export function ConsentBanner() {
15
+ const { lang, t } = useTranslations();
16
+ const [visible, setVisible] = useState(false);
17
+ const [managing, setManaging] = useState(false);
18
+ const [analytics, setAnalytics] = useState(true);
19
+ const [marketing, setMarketing] = useState(false);
20
+ const isFrench = lang.toLowerCase().startsWith('fr');
21
+
22
+ const translate = (key: string, fallback: string) => {
23
+ const translated = t(key);
24
+ return translated === key ? fallback : translated;
25
+ };
26
+
27
+ const privacyPolicyHref = translate(
28
+ 'privacy.consent.privacy_policy_href',
29
+ isFrench ? '/politique-de-confidentialite' : '/privacy-policy',
30
+ );
31
+
32
+ useEffect(() => {
33
+ if (!readConsent()) setVisible(true);
34
+ }, []);
35
+
36
+ const decide = (choice: { analytics: boolean; marketing: boolean }) => {
37
+ const pref = writeConsent(choice);
38
+ void logConsentDecision({
39
+ token: pref.token,
40
+ analytics: choice.analytics,
41
+ marketing: choice.marketing,
42
+ });
43
+ setVisible(false);
44
+ };
45
+
46
+ if (!visible) return null;
47
+
48
+ return (
49
+ <div
50
+ role="dialog"
51
+ aria-label={translate('privacy.consent.aria_label', 'Privacy consent')}
52
+ className="fixed bottom-4 right-4 z-[70] w-[min(92vw,360px)] animate-in fade-in slide-in-from-bottom-2 duration-300"
53
+ >
54
+ <div className="rounded-2xl border border-slate-200/70 bg-white/95 p-4 shadow-[0_8px_30px_rgba(15,23,42,0.12)] backdrop-blur-md dark:border-slate-700/60 dark:bg-slate-900/95 dark:shadow-[0_8px_30px_rgba(0,0,0,0.5)]">
55
+ <p className="text-sm font-medium text-slate-900 dark:text-slate-100">
56
+ {translate('privacy.consent.title', 'We value your privacy')}
57
+ </p>
58
+ <p className="mt-1 text-xs leading-relaxed text-slate-500 dark:text-slate-400">
59
+ {translate(
60
+ 'privacy.consent.description_before_policy_link',
61
+ 'We use only essential cookies by default. With your consent we also use analytics to improve the site. See our',
62
+ )}{' '}
63
+ <Link
64
+ href={privacyPolicyHref}
65
+ className="underline underline-offset-2 hover:text-slate-700 dark:hover:text-slate-200"
66
+ >
67
+ {translate('privacy.consent.privacy_policy_link', 'Privacy Policy')}
68
+ </Link>
69
+ {translate('privacy.consent.description_after_policy_link', '.')}
70
+ </p>
71
+
72
+ {managing && (
73
+ <div className="mt-3 space-y-2 rounded-lg bg-slate-50 p-3 dark:bg-slate-800/60">
74
+ <label className="flex items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
75
+ <span>
76
+ <span className="font-medium text-slate-800 dark:text-slate-200">
77
+ {translate('privacy.consent.necessary_label', 'Necessary')}
78
+ </span>
79
+ <span className="block text-[11px] text-slate-400">
80
+ {translate('privacy.consent.necessary_help', 'Always on')}
81
+ </span>
82
+ </span>
83
+ <input
84
+ type="checkbox"
85
+ checked
86
+ disabled
87
+ className="h-4 w-4 accent-slate-400"
88
+ />
89
+ </label>
90
+ <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
91
+ <span>
92
+ <span className="font-medium text-slate-800 dark:text-slate-200">
93
+ {translate('privacy.consent.analytics_label', 'Analytics')}
94
+ </span>
95
+ <span className="block text-[11px] text-slate-400">
96
+ {translate(
97
+ 'privacy.consent.analytics_help',
98
+ 'Usage insights',
99
+ )}
100
+ </span>
101
+ </span>
102
+ <input
103
+ type="checkbox"
104
+ checked={analytics}
105
+ onChange={(e) => setAnalytics(e.target.checked)}
106
+ className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
107
+ />
108
+ </label>
109
+ <label className="flex cursor-pointer items-center justify-between gap-3 text-xs text-slate-600 dark:text-slate-300">
110
+ <span>
111
+ <span className="font-medium text-slate-800 dark:text-slate-200">
112
+ {translate('privacy.consent.marketing_label', 'Marketing')}
113
+ </span>
114
+ <span className="block text-[11px] text-slate-400">
115
+ {translate(
116
+ 'privacy.consent.marketing_help',
117
+ 'Personalized content',
118
+ )}
119
+ </span>
120
+ </span>
121
+ <input
122
+ type="checkbox"
123
+ checked={marketing}
124
+ onChange={(e) => setMarketing(e.target.checked)}
125
+ className="h-4 w-4 accent-slate-900 dark:accent-slate-100"
126
+ />
127
+ </label>
128
+ </div>
129
+ )}
130
+
131
+ <div className="mt-3 flex items-center gap-2">
132
+ {managing ? (
133
+ <button
134
+ type="button"
135
+ onClick={() => decide({ analytics, marketing })}
136
+ className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
137
+ >
138
+ {translate('privacy.consent.save_choices', 'Save choices')}
139
+ </button>
140
+ ) : (
141
+ <button
142
+ type="button"
143
+ onClick={() => decide({ analytics: true, marketing: true })}
144
+ className="flex-1 rounded-lg bg-slate-900 px-3 py-2 text-xs font-medium text-white transition hover:bg-slate-800 dark:bg-slate-100 dark:text-slate-900 dark:hover:bg-white"
145
+ >
146
+ {translate('privacy.consent.accept_all', 'Accept all')}
147
+ </button>
148
+ )}
149
+ <button
150
+ type="button"
151
+ onClick={() => decide({ analytics: false, marketing: false })}
152
+ className="rounded-lg border border-slate-200 px-3 py-2 text-xs font-medium text-slate-600 transition hover:bg-slate-50 dark:border-slate-700 dark:text-slate-300 dark:hover:bg-slate-800"
153
+ >
154
+ {translate('privacy.consent.reject_all', 'Reject all')}
155
+ </button>
156
+ </div>
157
+
158
+ <button
159
+ type="button"
160
+ onClick={() => setManaging((prev) => !prev)}
161
+ className="mt-2 w-full text-center text-[11px] text-slate-800 underline underline-offset-2 transition hover:text-slate-600 dark:hover:text-slate-300"
162
+ >
163
+ {managing
164
+ ? translate('privacy.consent.hide_options', 'Hide options')
165
+ : translate('privacy.consent.manage_options', 'Manage options')}
166
+ </button>
167
+ </div>
168
+ </div>
169
+ );
170
+ }