create-nextblock 0.16.4 → 0.17.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CLAUDE.md +22 -0
- package/docker-template/.env.docker.example +69 -69
- package/docker-template/docker/db/init/99-jwt.sql +6 -6
- package/docker-template/docker/db/init/99-roles.sql +25 -25
- package/docker-template/docker/kong/kong.yml +112 -112
- package/docker-template/scripts/docker-setup.mjs +310 -310
- package/package.json +1 -1
- package/templates/nextblock-template/.browserslistrc +11 -11
- package/templates/nextblock-template/.swcrc +30 -30
- package/templates/nextblock-template/CLAUDE.md +26 -0
- package/templates/nextblock-template/app/(auth-pages)/sign-up/page.tsx +46 -46
- package/templates/nextblock-template/app/(auth-pages)/two-factor/page.tsx +51 -51
- package/templates/nextblock-template/app/.well-known/ucp/route.ts +16 -16
- package/templates/nextblock-template/app/actions/consent.ts +57 -57
- package/templates/nextblock-template/app/actions/twoFactorEmail.ts +22 -22
- package/templates/nextblock-template/app/api/ai/cortex/build-widget/route.ts +153 -153
- package/templates/nextblock-template/app/api/ai/generate-blocks/route.ts +96 -96
- package/templates/nextblock-template/app/api/brand/email-logo/route.ts +48 -48
- package/templates/nextblock-template/app/api/checkout/freemius/sync/route.ts +29 -29
- package/templates/nextblock-template/app/api/cms/check-updates/route.ts +44 -44
- package/templates/nextblock-template/app/api/cms/full-backup/export/route.ts +33 -33
- package/templates/nextblock-template/app/api/cms/full-backup/restore/route.ts +63 -63
- package/templates/nextblock-template/app/api/cron/reset-sandbox/route.ts +270 -205
- package/templates/nextblock-template/app/api/cron/reset-sandbox/sandboxResetSql.ts +8096 -7198
- package/templates/nextblock-template/app/api/cron/sync-currencies/route.ts +39 -39
- package/templates/nextblock-template/app/api/custom-blocks/db-relations/route.ts +92 -92
- package/templates/nextblock-template/app/api/custom-blocks/editor-definitions/route.ts +43 -43
- package/templates/nextblock-template/app/api/media/library/route.ts +69 -69
- package/templates/nextblock-template/app/api/media/r2-presigned/route.ts +53 -53
- package/templates/nextblock-template/app/api/visual-editing/block-draft/route.ts +47 -47
- package/templates/nextblock-template/app/api/visual-editing/product-draft/route.ts +47 -47
- package/templates/nextblock-template/app/article/[slug]/PostClientContent.tsx +442 -441
- package/templates/nextblock-template/app/article/[slug]/page.utils.ts +4 -1
- package/templates/nextblock-template/app/checkout/UcpCartHydrator.tsx +20 -20
- package/templates/nextblock-template/app/cms/blocks/components/BlockEditorModal.tsx +241 -241
- package/templates/nextblock-template/app/cms/blocks/components/CustomBlockEditorPreview.tsx +160 -160
- package/templates/nextblock-template/app/cms/blocks/editors/DynamicCustomBlockEditor.tsx +167 -167
- package/templates/nextblock-template/app/cms/components/ConnectGitHubButton.tsx +122 -122
- package/templates/nextblock-template/app/cms/components/CortexAiActiveContext.tsx +23 -23
- package/templates/nextblock-template/app/cms/components/SeoScoreBadge.tsx +3 -3
- package/templates/nextblock-template/app/cms/components/SystemAlertsBanner.tsx +112 -112
- package/templates/nextblock-template/app/cms/components/TablePagination.tsx +136 -136
- package/templates/nextblock-template/app/cms/components/TwoFactorReminderBanner.tsx +45 -45
- package/templates/nextblock-template/app/cms/components/github-connect-actions.ts +102 -102
- package/templates/nextblock-template/app/cms/components/system-alerts-actions.ts +31 -31
- package/templates/nextblock-template/app/cms/coupons/[id]/edit/page.tsx +16 -16
- package/templates/nextblock-template/app/cms/coupons/page.tsx +16 -16
- package/templates/nextblock-template/app/cms/custom-blocks/[id]/edit/page.tsx +66 -66
- package/templates/nextblock-template/app/cms/custom-blocks/actions.ts +519 -519
- package/templates/nextblock-template/app/cms/custom-blocks/components/BlocksLibraryTransferControls.tsx +256 -256
- package/templates/nextblock-template/app/cms/custom-blocks/components/DBRelationSelect.tsx +384 -384
- package/templates/nextblock-template/app/cms/custom-blocks/components/ImageR2Picker.tsx +221 -221
- package/templates/nextblock-template/app/cms/custom-blocks/new/page.tsx +12 -12
- package/templates/nextblock-template/app/cms/custom-blocks/page.tsx +438 -438
- package/templates/nextblock-template/app/cms/dashboard/components/DashboardComponents.tsx +200 -200
- package/templates/nextblock-template/app/cms/dashboard/components/DashboardOnboarding.tsx +130 -130
- package/templates/nextblock-template/app/cms/import-export/actions.ts +226 -226
- package/templates/nextblock-template/app/cms/pages/page.tsx +273 -273
- package/templates/nextblock-template/app/cms/posts/page.tsx +251 -251
- package/templates/nextblock-template/app/cms/products/categories/page.tsx +12 -12
- package/templates/nextblock-template/app/cms/products/new/page.tsx +135 -135
- package/templates/nextblock-template/app/cms/promotions/PromotionsWorkspace.tsx +456 -456
- package/templates/nextblock-template/app/cms/promotions/actions.ts +115 -115
- package/templates/nextblock-template/app/cms/promotions/page.tsx +31 -31
- package/templates/nextblock-template/app/cms/settings/backup-restore/BackupRestoreWorkspace.tsx +1004 -1004
- package/templates/nextblock-template/app/cms/settings/backup-restore/page.tsx +29 -29
- package/templates/nextblock-template/app/cms/settings/bot-protection/page.tsx +24 -24
- package/templates/nextblock-template/app/cms/settings/email/page.tsx +28 -28
- package/templates/nextblock-template/app/cms/settings/extra-translations/actions.ts +276 -276
- package/templates/nextblock-template/app/cms/settings/google-analytics/page.tsx +26 -26
- package/templates/nextblock-template/app/cms/settings/logos/components/DeleteLogoButton.tsx +21 -21
- package/templates/nextblock-template/app/cms/settings/logos/components/SetActiveLogoButton.tsx +42 -42
- package/templates/nextblock-template/app/cms/settings/logos/components/SiteSeoSettingsForm.tsx +133 -133
- package/templates/nextblock-template/app/cms/settings/privacy/page.tsx +27 -27
- package/templates/nextblock-template/app/cms/settings/registration/page.tsx +27 -27
- package/templates/nextblock-template/app/cms/settings/security/page.tsx +33 -33
- package/templates/nextblock-template/app/lib/site-settings.ts +105 -105
- package/templates/nextblock-template/app/lib/ucp/protocol.ts +190 -190
- package/templates/nextblock-template/app/lib/ucp/server.test.ts +56 -56
- package/templates/nextblock-template/app/setup/SetupWizard.tsx +678 -678
- package/templates/nextblock-template/app/setup/layout.tsx +13 -13
- package/templates/nextblock-template/app/setup/page.tsx +111 -111
- package/templates/nextblock-template/app/ucp/v1/carts/[id]/cancel/route.ts +38 -38
- package/templates/nextblock-template/app/ucp/v1/carts/[id]/route.ts +68 -68
- package/templates/nextblock-template/app/ucp/v1/carts/route.ts +35 -35
- package/templates/nextblock-template/app/ucp/v1/catalog/lookup/route.ts +35 -35
- package/templates/nextblock-template/app/ucp/v1/catalog/product/route.ts +35 -35
- package/templates/nextblock-template/app/ucp/v1/catalog/search/route.ts +34 -34
- package/templates/nextblock-template/components/CartTranslator.tsx +210 -210
- package/templates/nextblock-template/components/DeferredCartTranslator.tsx +51 -51
- package/templates/nextblock-template/components/DeferredGlobalSearch.tsx +68 -68
- package/templates/nextblock-template/components/DeferredGoogleAnalytics.tsx +70 -70
- package/templates/nextblock-template/components/FeatureImageHero.tsx +47 -47
- package/templates/nextblock-template/components/GlobalSearch.tsx +557 -557
- package/templates/nextblock-template/components/Header.tsx +38 -38
- package/templates/nextblock-template/components/PublicEnvBootstrap.tsx +30 -30
- package/templates/nextblock-template/components/ResponsiveNav.tsx +14 -14
- package/templates/nextblock-template/components/auth/AuthBotProtection.tsx +182 -182
- package/templates/nextblock-template/components/blocks/PostsGridClient.tsx +48 -48
- package/templates/nextblock-template/components/blocks/TestimonialBlock.tsx +9 -9
- package/templates/nextblock-template/components/blocks/publicRendererLoaders.ts +25 -25
- package/templates/nextblock-template/components/blocks/renderers/ButtonBlockRenderer.tsx +92 -92
- package/templates/nextblock-template/components/blocks/renderers/ClientTextBlockRenderer.tsx +11 -0
- package/templates/nextblock-template/components/blocks/renderers/PostsGridBlockRenderer.tsx +24 -24
- package/templates/nextblock-template/components/blocks/renderers/TestimonialBlockRenderer.tsx +57 -57
- package/templates/nextblock-template/components/blocks/renderers/inline/AlertWidgetRenderer.tsx +2 -2
- package/templates/nextblock-template/components/blocks/renderers/inline/CtaWidgetRenderer.tsx +2 -2
- package/templates/nextblock-template/components/media/YouTubeFacade.tsx +105 -105
- package/templates/nextblock-template/components/media/youtube-embed-replace.tsx +32 -32
- package/templates/nextblock-template/components/privacy/ConsentBanner.tsx +170 -170
- package/templates/nextblock-template/components/privacy/ConsentGatedAnalytics.tsx +70 -70
- package/templates/nextblock-template/components/renderers/CachedDynamicLayoutEngine.tsx +28 -28
- package/templates/nextblock-template/components/renderers/DynamicLayoutEngine.test.tsx +166 -166
- package/templates/nextblock-template/components/renderers/DynamicLayoutEngine.tsx +471 -471
- package/templates/nextblock-template/components/visual-editing/DeferredVisualEditing.tsx +21 -21
- package/templates/nextblock-template/context/language-rest-client.ts +32 -32
- package/templates/nextblock-template/docker/db/init/99-jwt.sql +6 -6
- package/templates/nextblock-template/docker/db/init/99-roles.sql +25 -25
- package/templates/nextblock-template/docker/kong/kong.yml +112 -112
- package/templates/nextblock-template/docs/02-ECOMMERCE-CAPABILITIES.md +364 -364
- package/templates/nextblock-template/docs/04-DATABASE-AND-AUTH.md +11 -0
- package/templates/nextblock-template/docs/07-BLOCK-SDK-AND-EXTENSIBILITY.md +146 -146
- package/templates/nextblock-template/docs/08-NEXTBLOCK-CORTEX-AI-ARCHITECTURE.md +19 -0
- package/templates/nextblock-template/docs/10-CUSTOM-BLOCKS.md +222 -222
- package/templates/nextblock-template/lib/app-secrets.ts +39 -39
- package/templates/nextblock-template/lib/auth/cookies.ts +47 -47
- package/templates/nextblock-template/lib/auth/crypto.ts +45 -45
- package/templates/nextblock-template/lib/auth/trustedDevices.ts +92 -92
- package/templates/nextblock-template/lib/blocks/README.md +13 -13
- package/templates/nextblock-template/lib/botProtection/verify.ts +134 -134
- package/templates/nextblock-template/lib/cms/payments-reminder.test.ts +135 -135
- package/templates/nextblock-template/lib/cms/payments-reminder.ts +105 -105
- package/templates/nextblock-template/lib/cms-transfer/types.ts +145 -145
- package/templates/nextblock-template/lib/custom-block-definitions.ts +87 -87
- package/templates/nextblock-template/lib/custom-block-r2-upload-shared.ts +178 -178
- package/templates/nextblock-template/lib/custom-block-r2-upload.test.ts +140 -140
- package/templates/nextblock-template/lib/custom-block-r2-upload.ts +88 -88
- package/templates/nextblock-template/lib/custom-block-relations.test.ts +227 -227
- package/templates/nextblock-template/lib/custom-block-relations.ts +279 -279
- package/templates/nextblock-template/lib/custom-block-safelist.ts +14 -14
- package/templates/nextblock-template/lib/editor/dynamic-extension-core.test.ts +172 -172
- package/templates/nextblock-template/lib/editor/dynamic-extension-core.ts +213 -213
- package/templates/nextblock-template/lib/editor/dynamic-extension-loader.ts +22 -22
- package/templates/nextblock-template/lib/editor/dynamic-extensions.tsx +193 -193
- package/templates/nextblock-template/lib/email/branding-format.test.ts +133 -133
- package/templates/nextblock-template/lib/email/branding-format.ts +123 -123
- package/templates/nextblock-template/lib/email/branding.ts +76 -76
- package/templates/nextblock-template/lib/full-backup/manifest.test.ts +121 -121
- package/templates/nextblock-template/lib/full-backup/manifest.ts +206 -206
- package/templates/nextblock-template/lib/logos/active-logo.ts +53 -53
- package/templates/nextblock-template/lib/media/resolveMediaUrl.ts +56 -54
- package/templates/nextblock-template/lib/media/youtube.ts +99 -99
- package/templates/nextblock-template/lib/onboarding/actions.ts +31 -31
- package/templates/nextblock-template/lib/privacy/consent-client.ts +57 -57
- package/templates/nextblock-template/lib/privacy/contact-emails.ts +64 -64
- package/templates/nextblock-template/lib/privacy/settings.ts +115 -115
- package/templates/nextblock-template/lib/privacy/types.ts +69 -69
- package/templates/nextblock-template/lib/promotions/server.test.ts +74 -74
- package/templates/nextblock-template/lib/promotions/server.ts +741 -741
- package/templates/nextblock-template/lib/resolve-block-relations.test.ts +142 -142
- package/templates/nextblock-template/lib/resolve-block-relations.ts +255 -255
- package/templates/nextblock-template/lib/seo/page-document.ts +4 -4
- package/templates/nextblock-template/lib/setup/actions.ts +460 -460
- package/templates/nextblock-template/lib/setup/env-status.ts +125 -125
- package/templates/nextblock-template/lib/setup/env-write.ts +111 -111
- package/templates/nextblock-template/lib/setup/migrations-bundle.ts +42 -12
- package/templates/nextblock-template/lib/setup/provisioning.ts +59 -59
- package/templates/nextblock-template/lib/setup/schema-apply.ts +408 -408
- package/templates/nextblock-template/lib/setup/system-config.ts +105 -105
- package/templates/nextblock-template/lib/setup/types.ts +18 -18
- package/templates/nextblock-template/lib/storage/provider.ts +66 -66
- package/templates/nextblock-template/lib/storage/supabase-storage.ts +103 -103
- package/templates/nextblock-template/lib/updates/github-device.ts +206 -206
- package/templates/nextblock-template/lib/updates/repo-identity.ts +56 -56
- package/templates/nextblock-template/lib/visual-editing/draft-content.test.ts +105 -105
- package/templates/nextblock-template/lib/visual-editing/draft-route.test.ts +42 -42
- package/templates/nextblock-template/lib/visual-editing/edit-info.test.ts +143 -143
- package/templates/nextblock-template/lib/visual-editing/edit-info.ts +94 -94
- package/templates/nextblock-template/lib/visual-editing/product-drafts.test.ts +81 -81
- package/templates/nextblock-template/lib/zod-config.ts +5 -5
- package/templates/nextblock-template/next-env.d.ts +1 -0
- package/templates/nextblock-template/package.json +1 -1
- package/templates/nextblock-template/public/images/cortex_post.webp +0 -0
- package/templates/nextblock-template/public/images/update_nextblock.webp +0 -0
- package/templates/nextblock-template/scripts/docker-setup.mjs +310 -310
- package/templates/nextblock-template/scripts/validate-editor-block-schema.ts +112 -112
- package/templates/nextblock-template/scripts/verify-cortex-ai-build-widget.tsx +98 -98
- package/templates/nextblock-template/scripts/verify-cortex-ai-generate-blocks.ts +62 -62
- package/templates/nextblock-template/scripts/verify-cortex-ai-global-tools.ts +537 -537
- package/templates/nextblock-template/scripts/verify-cortex-ai-routing.ts +58 -58
- package/templates/nextblock-template/scripts/verify-custom-block-definitions.ts +188 -188
- package/templates/nextblock-template/scripts/verify-dynamic-custom-block-extensions.ts +123 -123
- package/templates/nextblock-template/scripts/verify-dynamic-layout-engine.tsx +133 -133
- package/templates/nextblock-template/scripts/verify-milestone-2-custom-blocks.ts +65 -65
- package/templates/nextblock-template/tools/deploy-supabase.js +159 -159
- package/templates/nextblock-template/types/jsdom.d.ts +6 -6
|
@@ -1,88 +1,88 @@
|
|
|
1
|
-
import 'server-only';
|
|
2
|
-
|
|
3
|
-
import { PutObjectCommand } from '@aws-sdk/client-s3';
|
|
4
|
-
import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
|
|
5
|
-
import { getS3PresignClient } from '@nextblock-cms/utils/server';
|
|
6
|
-
|
|
7
|
-
import { resolveMediaUrl } from './media/resolveMediaUrl';
|
|
8
|
-
import { getStorageBackend, getStorageBucket } from './storage/provider';
|
|
9
|
-
import { supabaseCreateSignedUpload } from './storage/supabase-storage';
|
|
10
|
-
import {
|
|
11
|
-
buildR2UploadObjectKey,
|
|
12
|
-
R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
|
|
13
|
-
R2PresignedUploadError,
|
|
14
|
-
type R2PresignedUploadResult,
|
|
15
|
-
type ValidR2PresignedUploadPayload,
|
|
16
|
-
} from './custom-block-r2-upload-shared';
|
|
17
|
-
|
|
18
|
-
export {
|
|
19
|
-
buildR2UploadObjectKey,
|
|
20
|
-
R2_PRESIGNED_UPLOAD_ALLOWED_CONTENT_TYPES,
|
|
21
|
-
R2_PRESIGNED_UPLOAD_DEFAULT_FOLDER,
|
|
22
|
-
R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
|
|
23
|
-
R2_PRESIGNED_UPLOAD_MAX_BYTES,
|
|
24
|
-
R2PresignedUploadError,
|
|
25
|
-
sanitizeR2UploadFolder,
|
|
26
|
-
validateR2PresignedUploadPayload,
|
|
27
|
-
type R2PresignedUploadResult,
|
|
28
|
-
type ValidR2PresignedUploadPayload,
|
|
29
|
-
} from './custom-block-r2-upload-shared';
|
|
30
|
-
|
|
31
|
-
export async function createR2PresignedUpload(
|
|
32
|
-
payload: ValidR2PresignedUploadPayload,
|
|
33
|
-
options: { now?: Date; nonce?: string; userId: string }
|
|
34
|
-
): Promise<R2PresignedUploadResult> {
|
|
35
|
-
const backend = getStorageBackend();
|
|
36
|
-
const bucketName = getStorageBucket();
|
|
37
|
-
if (!bucketName) {
|
|
38
|
-
throw new R2PresignedUploadError('File uploads are not configured on this server.', 500);
|
|
39
|
-
}
|
|
40
|
-
|
|
41
|
-
const objectKey = buildR2UploadObjectKey(payload, options);
|
|
42
|
-
const publicUrl = resolveMediaUrl(objectKey) ?? `/${objectKey}`;
|
|
43
|
-
|
|
44
|
-
if (backend === 'supabase') {
|
|
45
|
-
// Native Supabase Storage: a signed upload URL the browser PUTs to directly.
|
|
46
|
-
const { signedUrl } = await supabaseCreateSignedUpload(objectKey);
|
|
47
|
-
return {
|
|
48
|
-
expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
|
|
49
|
-
headers: {
|
|
50
|
-
'Content-Type': payload.contentType,
|
|
51
|
-
},
|
|
52
|
-
method: 'PUT',
|
|
53
|
-
objectKey,
|
|
54
|
-
presignedUrl: signedUrl,
|
|
55
|
-
publicUrl,
|
|
56
|
-
uploadUrl: signedUrl,
|
|
57
|
-
};
|
|
58
|
-
}
|
|
59
|
-
|
|
60
|
-
const s3Client = await getS3PresignClient();
|
|
61
|
-
if (!s3Client) {
|
|
62
|
-
throw new R2PresignedUploadError('File uploads are not configured on this server.', 500);
|
|
63
|
-
}
|
|
64
|
-
|
|
65
|
-
const command = new PutObjectCommand({
|
|
66
|
-
Bucket: bucketName,
|
|
67
|
-
ContentType: payload.contentType,
|
|
68
|
-
Key: objectKey,
|
|
69
|
-
Metadata: {
|
|
70
|
-
'uploader-user-id': options.userId,
|
|
71
|
-
},
|
|
72
|
-
});
|
|
73
|
-
const presignedUrl = await getSignedUrl(s3Client, command, {
|
|
74
|
-
expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
|
|
75
|
-
});
|
|
76
|
-
|
|
77
|
-
return {
|
|
78
|
-
expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
|
|
79
|
-
headers: {
|
|
80
|
-
'Content-Type': payload.contentType,
|
|
81
|
-
},
|
|
82
|
-
method: 'PUT',
|
|
83
|
-
objectKey,
|
|
84
|
-
presignedUrl,
|
|
85
|
-
publicUrl,
|
|
86
|
-
uploadUrl: presignedUrl,
|
|
87
|
-
};
|
|
88
|
-
}
|
|
1
|
+
import 'server-only';
|
|
2
|
+
|
|
3
|
+
import { PutObjectCommand } from '@aws-sdk/client-s3';
|
|
4
|
+
import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
|
|
5
|
+
import { getS3PresignClient } from '@nextblock-cms/utils/server';
|
|
6
|
+
|
|
7
|
+
import { resolveMediaUrl } from './media/resolveMediaUrl';
|
|
8
|
+
import { getStorageBackend, getStorageBucket } from './storage/provider';
|
|
9
|
+
import { supabaseCreateSignedUpload } from './storage/supabase-storage';
|
|
10
|
+
import {
|
|
11
|
+
buildR2UploadObjectKey,
|
|
12
|
+
R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
|
|
13
|
+
R2PresignedUploadError,
|
|
14
|
+
type R2PresignedUploadResult,
|
|
15
|
+
type ValidR2PresignedUploadPayload,
|
|
16
|
+
} from './custom-block-r2-upload-shared';
|
|
17
|
+
|
|
18
|
+
export {
|
|
19
|
+
buildR2UploadObjectKey,
|
|
20
|
+
R2_PRESIGNED_UPLOAD_ALLOWED_CONTENT_TYPES,
|
|
21
|
+
R2_PRESIGNED_UPLOAD_DEFAULT_FOLDER,
|
|
22
|
+
R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
|
|
23
|
+
R2_PRESIGNED_UPLOAD_MAX_BYTES,
|
|
24
|
+
R2PresignedUploadError,
|
|
25
|
+
sanitizeR2UploadFolder,
|
|
26
|
+
validateR2PresignedUploadPayload,
|
|
27
|
+
type R2PresignedUploadResult,
|
|
28
|
+
type ValidR2PresignedUploadPayload,
|
|
29
|
+
} from './custom-block-r2-upload-shared';
|
|
30
|
+
|
|
31
|
+
export async function createR2PresignedUpload(
|
|
32
|
+
payload: ValidR2PresignedUploadPayload,
|
|
33
|
+
options: { now?: Date; nonce?: string; userId: string }
|
|
34
|
+
): Promise<R2PresignedUploadResult> {
|
|
35
|
+
const backend = getStorageBackend();
|
|
36
|
+
const bucketName = getStorageBucket();
|
|
37
|
+
if (!bucketName) {
|
|
38
|
+
throw new R2PresignedUploadError('File uploads are not configured on this server.', 500);
|
|
39
|
+
}
|
|
40
|
+
|
|
41
|
+
const objectKey = buildR2UploadObjectKey(payload, options);
|
|
42
|
+
const publicUrl = resolveMediaUrl(objectKey) ?? `/${objectKey}`;
|
|
43
|
+
|
|
44
|
+
if (backend === 'supabase') {
|
|
45
|
+
// Native Supabase Storage: a signed upload URL the browser PUTs to directly.
|
|
46
|
+
const { signedUrl } = await supabaseCreateSignedUpload(objectKey);
|
|
47
|
+
return {
|
|
48
|
+
expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
|
|
49
|
+
headers: {
|
|
50
|
+
'Content-Type': payload.contentType,
|
|
51
|
+
},
|
|
52
|
+
method: 'PUT',
|
|
53
|
+
objectKey,
|
|
54
|
+
presignedUrl: signedUrl,
|
|
55
|
+
publicUrl,
|
|
56
|
+
uploadUrl: signedUrl,
|
|
57
|
+
};
|
|
58
|
+
}
|
|
59
|
+
|
|
60
|
+
const s3Client = await getS3PresignClient();
|
|
61
|
+
if (!s3Client) {
|
|
62
|
+
throw new R2PresignedUploadError('File uploads are not configured on this server.', 500);
|
|
63
|
+
}
|
|
64
|
+
|
|
65
|
+
const command = new PutObjectCommand({
|
|
66
|
+
Bucket: bucketName,
|
|
67
|
+
ContentType: payload.contentType,
|
|
68
|
+
Key: objectKey,
|
|
69
|
+
Metadata: {
|
|
70
|
+
'uploader-user-id': options.userId,
|
|
71
|
+
},
|
|
72
|
+
});
|
|
73
|
+
const presignedUrl = await getSignedUrl(s3Client, command, {
|
|
74
|
+
expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
|
|
75
|
+
});
|
|
76
|
+
|
|
77
|
+
return {
|
|
78
|
+
expiresIn: R2_PRESIGNED_UPLOAD_EXPIRES_IN_SECONDS,
|
|
79
|
+
headers: {
|
|
80
|
+
'Content-Type': payload.contentType,
|
|
81
|
+
},
|
|
82
|
+
method: 'PUT',
|
|
83
|
+
objectKey,
|
|
84
|
+
presignedUrl,
|
|
85
|
+
publicUrl,
|
|
86
|
+
uploadUrl: presignedUrl,
|
|
87
|
+
};
|
|
88
|
+
}
|
|
@@ -1,227 +1,227 @@
|
|
|
1
|
-
import { describe, expect, it, vi } from 'vitest';
|
|
2
|
-
|
|
3
|
-
vi.mock('server-only', () => ({}));
|
|
4
|
-
|
|
5
|
-
import {
|
|
6
|
-
getCustomBlockRelationTarget,
|
|
7
|
-
listCustomBlockRelationTargets,
|
|
8
|
-
} from './custom-block-relation-registry';
|
|
9
|
-
import { searchCustomBlockRelationRows } from './custom-block-relations';
|
|
10
|
-
|
|
11
|
-
class MockSupabaseQuery {
|
|
12
|
-
operations: Array<{ args: unknown[]; op: string }> = [];
|
|
13
|
-
|
|
14
|
-
constructor(private readonly rows: Array<Record<string, unknown>>) {}
|
|
15
|
-
|
|
16
|
-
select(...args: unknown[]) {
|
|
17
|
-
this.operations.push({ args, op: 'select' });
|
|
18
|
-
return this;
|
|
19
|
-
}
|
|
20
|
-
|
|
21
|
-
limit(...args: unknown[]) {
|
|
22
|
-
this.operations.push({ args, op: 'limit' });
|
|
23
|
-
return this;
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
eq(...args: unknown[]) {
|
|
27
|
-
this.operations.push({ args, op: 'eq' });
|
|
28
|
-
return this;
|
|
29
|
-
}
|
|
30
|
-
|
|
31
|
-
in(...args: unknown[]) {
|
|
32
|
-
this.operations.push({ args, op: 'in' });
|
|
33
|
-
return this;
|
|
34
|
-
}
|
|
35
|
-
|
|
36
|
-
or(...args: unknown[]) {
|
|
37
|
-
this.operations.push({ args, op: 'or' });
|
|
38
|
-
return this;
|
|
39
|
-
}
|
|
40
|
-
|
|
41
|
-
order(...args: unknown[]) {
|
|
42
|
-
this.operations.push({ args, op: 'order' });
|
|
43
|
-
return this;
|
|
44
|
-
}
|
|
45
|
-
|
|
46
|
-
then(resolve: (value: { data: Array<Record<string, unknown>>; error: null }) => unknown) {
|
|
47
|
-
return Promise.resolve({ data: this.rows, error: null }).then(resolve);
|
|
48
|
-
}
|
|
49
|
-
}
|
|
50
|
-
|
|
51
|
-
describe('custom block relation registry and search', () => {
|
|
52
|
-
it('exposes a curated allowlist of relation targets', () => {
|
|
53
|
-
expect(listCustomBlockRelationTargets().map((target) => target.table)).toEqual([
|
|
54
|
-
'pages',
|
|
55
|
-
'posts',
|
|
56
|
-
'products',
|
|
57
|
-
'product_variants',
|
|
58
|
-
'media',
|
|
59
|
-
'categories',
|
|
60
|
-
'profiles',
|
|
61
|
-
'languages',
|
|
62
|
-
]);
|
|
63
|
-
expect(getCustomBlockRelationTarget('orders')).toBeUndefined();
|
|
64
|
-
});
|
|
65
|
-
|
|
66
|
-
it('rejects tables outside the allowlist', async () => {
|
|
67
|
-
const result = await searchCustomBlockRelationRows({} as any, {
|
|
68
|
-
table: 'orders',
|
|
69
|
-
});
|
|
70
|
-
|
|
71
|
-
expect(result).toEqual({
|
|
72
|
-
error: 'Relation table "orders" is not available.',
|
|
73
|
-
status: 400,
|
|
74
|
-
});
|
|
75
|
-
});
|
|
76
|
-
|
|
77
|
-
it('searches allowed tables with capped limits and active filters', async () => {
|
|
78
|
-
const query = new MockSupabaseQuery([
|
|
79
|
-
{
|
|
80
|
-
id: 1,
|
|
81
|
-
slug: 'home',
|
|
82
|
-
status: 'published',
|
|
83
|
-
title: 'Home',
|
|
84
|
-
},
|
|
85
|
-
]);
|
|
86
|
-
const from = vi.fn(() => query);
|
|
87
|
-
|
|
88
|
-
const result = await searchCustomBlockRelationRows({ from } as any, {
|
|
89
|
-
limit: '500',
|
|
90
|
-
query: 'home',
|
|
91
|
-
table: 'pages',
|
|
92
|
-
});
|
|
93
|
-
|
|
94
|
-
expect(from).toHaveBeenCalledWith('pages');
|
|
95
|
-
expect(query.operations).toContainEqual({ args: [50], op: 'limit' });
|
|
96
|
-
expect(query.operations).toContainEqual({ args: ['status', 'published'], op: 'eq' });
|
|
97
|
-
expect(query.operations.some((operation) => operation.op === 'or')).toBe(true);
|
|
98
|
-
expect(result).toMatchObject({
|
|
99
|
-
items: [
|
|
100
|
-
{
|
|
101
|
-
description: 'home - published',
|
|
102
|
-
label: 'Home',
|
|
103
|
-
table: 'pages',
|
|
104
|
-
value: '1',
|
|
105
|
-
},
|
|
106
|
-
],
|
|
107
|
-
});
|
|
108
|
-
});
|
|
109
|
-
|
|
110
|
-
it('fetches requested values with normalized numeric IDs', async () => {
|
|
111
|
-
const query = new MockSupabaseQuery([
|
|
112
|
-
{
|
|
113
|
-
code: 'en',
|
|
114
|
-
id: 1,
|
|
115
|
-
is_active: true,
|
|
116
|
-
name: 'English',
|
|
117
|
-
},
|
|
118
|
-
]);
|
|
119
|
-
const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
|
|
120
|
-
table: 'languages',
|
|
121
|
-
values: ['1', 'not-a-number'],
|
|
122
|
-
});
|
|
123
|
-
|
|
124
|
-
expect(query.operations).toContainEqual({ args: ['id', [1]], op: 'in' });
|
|
125
|
-
expect(result).toMatchObject({
|
|
126
|
-
items: [
|
|
127
|
-
{
|
|
128
|
-
description: 'en',
|
|
129
|
-
label: 'English',
|
|
130
|
-
value: '1',
|
|
131
|
-
},
|
|
132
|
-
],
|
|
133
|
-
});
|
|
134
|
-
});
|
|
135
|
-
|
|
136
|
-
it('maps products product_media joins to a flat virtual images list and default image', async () => {
|
|
137
|
-
const query = new MockSupabaseQuery([
|
|
138
|
-
{
|
|
139
|
-
id: 'p-1',
|
|
140
|
-
title: 'Wireless Headphones',
|
|
141
|
-
short_description: 'Premium headphones',
|
|
142
|
-
product_media: [
|
|
143
|
-
{
|
|
144
|
-
media: {
|
|
145
|
-
id: 'm-1',
|
|
146
|
-
object_key: 'headphone-image.png',
|
|
147
|
-
file_name: 'headphones.png',
|
|
148
|
-
file_type: 'image/png',
|
|
149
|
-
},
|
|
150
|
-
},
|
|
151
|
-
],
|
|
152
|
-
},
|
|
153
|
-
]);
|
|
154
|
-
const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
|
|
155
|
-
table: 'products',
|
|
156
|
-
values: ['p-1'],
|
|
157
|
-
});
|
|
158
|
-
|
|
159
|
-
expect(result).toMatchObject({
|
|
160
|
-
items: [
|
|
161
|
-
{
|
|
162
|
-
label: 'Wireless Headphones',
|
|
163
|
-
value: 'p-1',
|
|
164
|
-
record: {
|
|
165
|
-
images: [
|
|
166
|
-
{
|
|
167
|
-
id: 'm-1',
|
|
168
|
-
object_key: 'headphone-image.png',
|
|
169
|
-
file_name: 'headphones.png',
|
|
170
|
-
file_type: 'image/png',
|
|
171
|
-
},
|
|
172
|
-
],
|
|
173
|
-
image: {
|
|
174
|
-
id: 'm-1',
|
|
175
|
-
object_key: 'headphone-image.png',
|
|
176
|
-
},
|
|
177
|
-
object_key: 'headphone-image.png',
|
|
178
|
-
main_image: 'headphone-image.png',
|
|
179
|
-
},
|
|
180
|
-
},
|
|
181
|
-
],
|
|
182
|
-
});
|
|
183
|
-
});
|
|
184
|
-
|
|
185
|
-
it('maps product_variants parent products (as object or array) to a friendly label', async () => {
|
|
186
|
-
const query = new MockSupabaseQuery([
|
|
187
|
-
{
|
|
188
|
-
id: 'v-1',
|
|
189
|
-
sku: 'NB-SIGNAL-CAP-L',
|
|
190
|
-
price: 2600,
|
|
191
|
-
products: {
|
|
192
|
-
id: 'p-1',
|
|
193
|
-
title: 'Signal Cap',
|
|
194
|
-
},
|
|
195
|
-
},
|
|
196
|
-
{
|
|
197
|
-
id: 'v-2',
|
|
198
|
-
sku: 'NB-STUDIO-TEE-M',
|
|
199
|
-
price: 3200,
|
|
200
|
-
products: [
|
|
201
|
-
{
|
|
202
|
-
id: 'p-2',
|
|
203
|
-
title: 'Studio Tee',
|
|
204
|
-
},
|
|
205
|
-
],
|
|
206
|
-
},
|
|
207
|
-
]);
|
|
208
|
-
|
|
209
|
-
const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
|
|
210
|
-
table: 'product_variants',
|
|
211
|
-
values: ['v-1', 'v-2'],
|
|
212
|
-
});
|
|
213
|
-
|
|
214
|
-
expect(result).toMatchObject({
|
|
215
|
-
items: [
|
|
216
|
-
{
|
|
217
|
-
label: 'Signal Cap (NB-SIGNAL-CAP-L)',
|
|
218
|
-
value: 'v-1',
|
|
219
|
-
},
|
|
220
|
-
{
|
|
221
|
-
label: 'Studio Tee (NB-STUDIO-TEE-M)',
|
|
222
|
-
value: 'v-2',
|
|
223
|
-
},
|
|
224
|
-
],
|
|
225
|
-
});
|
|
226
|
-
});
|
|
227
|
-
});
|
|
1
|
+
import { describe, expect, it, vi } from 'vitest';
|
|
2
|
+
|
|
3
|
+
vi.mock('server-only', () => ({}));
|
|
4
|
+
|
|
5
|
+
import {
|
|
6
|
+
getCustomBlockRelationTarget,
|
|
7
|
+
listCustomBlockRelationTargets,
|
|
8
|
+
} from './custom-block-relation-registry';
|
|
9
|
+
import { searchCustomBlockRelationRows } from './custom-block-relations';
|
|
10
|
+
|
|
11
|
+
class MockSupabaseQuery {
|
|
12
|
+
operations: Array<{ args: unknown[]; op: string }> = [];
|
|
13
|
+
|
|
14
|
+
constructor(private readonly rows: Array<Record<string, unknown>>) {}
|
|
15
|
+
|
|
16
|
+
select(...args: unknown[]) {
|
|
17
|
+
this.operations.push({ args, op: 'select' });
|
|
18
|
+
return this;
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
limit(...args: unknown[]) {
|
|
22
|
+
this.operations.push({ args, op: 'limit' });
|
|
23
|
+
return this;
|
|
24
|
+
}
|
|
25
|
+
|
|
26
|
+
eq(...args: unknown[]) {
|
|
27
|
+
this.operations.push({ args, op: 'eq' });
|
|
28
|
+
return this;
|
|
29
|
+
}
|
|
30
|
+
|
|
31
|
+
in(...args: unknown[]) {
|
|
32
|
+
this.operations.push({ args, op: 'in' });
|
|
33
|
+
return this;
|
|
34
|
+
}
|
|
35
|
+
|
|
36
|
+
or(...args: unknown[]) {
|
|
37
|
+
this.operations.push({ args, op: 'or' });
|
|
38
|
+
return this;
|
|
39
|
+
}
|
|
40
|
+
|
|
41
|
+
order(...args: unknown[]) {
|
|
42
|
+
this.operations.push({ args, op: 'order' });
|
|
43
|
+
return this;
|
|
44
|
+
}
|
|
45
|
+
|
|
46
|
+
then(resolve: (value: { data: Array<Record<string, unknown>>; error: null }) => unknown) {
|
|
47
|
+
return Promise.resolve({ data: this.rows, error: null }).then(resolve);
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
|
|
51
|
+
describe('custom block relation registry and search', () => {
|
|
52
|
+
it('exposes a curated allowlist of relation targets', () => {
|
|
53
|
+
expect(listCustomBlockRelationTargets().map((target) => target.table)).toEqual([
|
|
54
|
+
'pages',
|
|
55
|
+
'posts',
|
|
56
|
+
'products',
|
|
57
|
+
'product_variants',
|
|
58
|
+
'media',
|
|
59
|
+
'categories',
|
|
60
|
+
'profiles',
|
|
61
|
+
'languages',
|
|
62
|
+
]);
|
|
63
|
+
expect(getCustomBlockRelationTarget('orders')).toBeUndefined();
|
|
64
|
+
});
|
|
65
|
+
|
|
66
|
+
it('rejects tables outside the allowlist', async () => {
|
|
67
|
+
const result = await searchCustomBlockRelationRows({} as any, {
|
|
68
|
+
table: 'orders',
|
|
69
|
+
});
|
|
70
|
+
|
|
71
|
+
expect(result).toEqual({
|
|
72
|
+
error: 'Relation table "orders" is not available.',
|
|
73
|
+
status: 400,
|
|
74
|
+
});
|
|
75
|
+
});
|
|
76
|
+
|
|
77
|
+
it('searches allowed tables with capped limits and active filters', async () => {
|
|
78
|
+
const query = new MockSupabaseQuery([
|
|
79
|
+
{
|
|
80
|
+
id: 1,
|
|
81
|
+
slug: 'home',
|
|
82
|
+
status: 'published',
|
|
83
|
+
title: 'Home',
|
|
84
|
+
},
|
|
85
|
+
]);
|
|
86
|
+
const from = vi.fn(() => query);
|
|
87
|
+
|
|
88
|
+
const result = await searchCustomBlockRelationRows({ from } as any, {
|
|
89
|
+
limit: '500',
|
|
90
|
+
query: 'home',
|
|
91
|
+
table: 'pages',
|
|
92
|
+
});
|
|
93
|
+
|
|
94
|
+
expect(from).toHaveBeenCalledWith('pages');
|
|
95
|
+
expect(query.operations).toContainEqual({ args: [50], op: 'limit' });
|
|
96
|
+
expect(query.operations).toContainEqual({ args: ['status', 'published'], op: 'eq' });
|
|
97
|
+
expect(query.operations.some((operation) => operation.op === 'or')).toBe(true);
|
|
98
|
+
expect(result).toMatchObject({
|
|
99
|
+
items: [
|
|
100
|
+
{
|
|
101
|
+
description: 'home - published',
|
|
102
|
+
label: 'Home',
|
|
103
|
+
table: 'pages',
|
|
104
|
+
value: '1',
|
|
105
|
+
},
|
|
106
|
+
],
|
|
107
|
+
});
|
|
108
|
+
});
|
|
109
|
+
|
|
110
|
+
it('fetches requested values with normalized numeric IDs', async () => {
|
|
111
|
+
const query = new MockSupabaseQuery([
|
|
112
|
+
{
|
|
113
|
+
code: 'en',
|
|
114
|
+
id: 1,
|
|
115
|
+
is_active: true,
|
|
116
|
+
name: 'English',
|
|
117
|
+
},
|
|
118
|
+
]);
|
|
119
|
+
const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
|
|
120
|
+
table: 'languages',
|
|
121
|
+
values: ['1', 'not-a-number'],
|
|
122
|
+
});
|
|
123
|
+
|
|
124
|
+
expect(query.operations).toContainEqual({ args: ['id', [1]], op: 'in' });
|
|
125
|
+
expect(result).toMatchObject({
|
|
126
|
+
items: [
|
|
127
|
+
{
|
|
128
|
+
description: 'en',
|
|
129
|
+
label: 'English',
|
|
130
|
+
value: '1',
|
|
131
|
+
},
|
|
132
|
+
],
|
|
133
|
+
});
|
|
134
|
+
});
|
|
135
|
+
|
|
136
|
+
it('maps products product_media joins to a flat virtual images list and default image', async () => {
|
|
137
|
+
const query = new MockSupabaseQuery([
|
|
138
|
+
{
|
|
139
|
+
id: 'p-1',
|
|
140
|
+
title: 'Wireless Headphones',
|
|
141
|
+
short_description: 'Premium headphones',
|
|
142
|
+
product_media: [
|
|
143
|
+
{
|
|
144
|
+
media: {
|
|
145
|
+
id: 'm-1',
|
|
146
|
+
object_key: 'headphone-image.png',
|
|
147
|
+
file_name: 'headphones.png',
|
|
148
|
+
file_type: 'image/png',
|
|
149
|
+
},
|
|
150
|
+
},
|
|
151
|
+
],
|
|
152
|
+
},
|
|
153
|
+
]);
|
|
154
|
+
const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
|
|
155
|
+
table: 'products',
|
|
156
|
+
values: ['p-1'],
|
|
157
|
+
});
|
|
158
|
+
|
|
159
|
+
expect(result).toMatchObject({
|
|
160
|
+
items: [
|
|
161
|
+
{
|
|
162
|
+
label: 'Wireless Headphones',
|
|
163
|
+
value: 'p-1',
|
|
164
|
+
record: {
|
|
165
|
+
images: [
|
|
166
|
+
{
|
|
167
|
+
id: 'm-1',
|
|
168
|
+
object_key: 'headphone-image.png',
|
|
169
|
+
file_name: 'headphones.png',
|
|
170
|
+
file_type: 'image/png',
|
|
171
|
+
},
|
|
172
|
+
],
|
|
173
|
+
image: {
|
|
174
|
+
id: 'm-1',
|
|
175
|
+
object_key: 'headphone-image.png',
|
|
176
|
+
},
|
|
177
|
+
object_key: 'headphone-image.png',
|
|
178
|
+
main_image: 'headphone-image.png',
|
|
179
|
+
},
|
|
180
|
+
},
|
|
181
|
+
],
|
|
182
|
+
});
|
|
183
|
+
});
|
|
184
|
+
|
|
185
|
+
it('maps product_variants parent products (as object or array) to a friendly label', async () => {
|
|
186
|
+
const query = new MockSupabaseQuery([
|
|
187
|
+
{
|
|
188
|
+
id: 'v-1',
|
|
189
|
+
sku: 'NB-SIGNAL-CAP-L',
|
|
190
|
+
price: 2600,
|
|
191
|
+
products: {
|
|
192
|
+
id: 'p-1',
|
|
193
|
+
title: 'Signal Cap',
|
|
194
|
+
},
|
|
195
|
+
},
|
|
196
|
+
{
|
|
197
|
+
id: 'v-2',
|
|
198
|
+
sku: 'NB-STUDIO-TEE-M',
|
|
199
|
+
price: 3200,
|
|
200
|
+
products: [
|
|
201
|
+
{
|
|
202
|
+
id: 'p-2',
|
|
203
|
+
title: 'Studio Tee',
|
|
204
|
+
},
|
|
205
|
+
],
|
|
206
|
+
},
|
|
207
|
+
]);
|
|
208
|
+
|
|
209
|
+
const result = await searchCustomBlockRelationRows({ from: () => query } as any, {
|
|
210
|
+
table: 'product_variants',
|
|
211
|
+
values: ['v-1', 'v-2'],
|
|
212
|
+
});
|
|
213
|
+
|
|
214
|
+
expect(result).toMatchObject({
|
|
215
|
+
items: [
|
|
216
|
+
{
|
|
217
|
+
label: 'Signal Cap (NB-SIGNAL-CAP-L)',
|
|
218
|
+
value: 'v-1',
|
|
219
|
+
},
|
|
220
|
+
{
|
|
221
|
+
label: 'Studio Tee (NB-STUDIO-TEE-M)',
|
|
222
|
+
value: 'v-2',
|
|
223
|
+
},
|
|
224
|
+
],
|
|
225
|
+
});
|
|
226
|
+
});
|
|
227
|
+
});
|